Edit tour

Windows Analysis Report
https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en

Overview

General Information

Sample URL:	https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash
Analysis ID:	1519081
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=1956,i,13917854189803992701,9393484012877030813,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Phishing

AI detected phishing page

LLM: Score: 9 Reasons: The URL 'check-hticompialnt520842.com' does not match the legitimate domain 'booking.com'., The domain name contains suspicious elements such as misspellings and extra characters., The brand 'booking.com' is a well-known brand, and any deviation from its official domain is highly suspicious., The presence of input fields for 'username' and 'password' on a non-legitimate domain is a common phishing tactic. DOM: 0.0.pages.csv

HTTP Parser: Number of links: 0

HTTP Parser: Title: Booking.com does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://account.booking.com/register?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y	HTTP Parser: No favicon
Source: https://account.booking.com/account-recovery/options?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y	HTTP Parser: No favicon

HTTP Parser: No <meta name="author".. found

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49769 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59163 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59295 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59445 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.6:49770 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:59125 -> 162.159.36.2:53

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49769 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/stylesheets/45_1975cbc2f7eaad75f590.css HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://check-hticompialnt520842.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://check-hticompialnt520842.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://check-hticompialnt520842.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/stylesheets/938_afde72b9aaa8302ff017.css HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/stylesheets/826_0d1737e180931a217647.css HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/stylesheets/57_39298f44d077a144fe18.css HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/stylesheets/banner.css HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/javascripts/client.js HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/ws HTTP/1.1Host: check-hticompialnt520842.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://check-hticompialnt520842.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: dSUzBs0GyWLlI8FVoBP4pQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/favicon.svg HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/flags/en.png HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/javascripts/client.js HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /static/images/favicon.ico HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/favicon.svg HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/flags/en.png HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/favicon.ico HTTP/1.1Host: check-hticompialnt520842.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us?utm_source=extranet_login_page HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/fonts/icons/icons.woff?v=1.3.3 HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://partner.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/OtAutoBlock.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon/bookingdotcomb2b/booking_prod/scripts/evergage.min.js HTTP/1.1Host: cdn.evgnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optimize.js?id=GTM-MVTHSWF HTTP/1.1Host: www.googleoptimize.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js__JAsomIqNPkRGM4sKLB0ixqwxSWA7z7kGPNbFsSL2oQ.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJx1UQFuwyAM_FBYnjQdxE1oiI2MaZu9fqRrE7XbJGTpuLPvDAMMCStp72nCJYqWLuFr7bfSeZE58tiPSTzSDn2N7lx2GETCHCmruJOEWtwEHhLpoUeYnUk7uaObpchzP2jNSB8P2BWDxWIxlCdz3BwxbHHB4EKKbeC7y8auUq16ctbmOlo8DW_iS6Rr6e_1A2fcjiWgKrVQar0opC5DMSry9GLgwdzI_xM8BJvDL_7wCMJGbH-YTISh9ReChqkLovR8kEEl-2omvItPCaPbwAKdHZK1TrDwujSbXVW3dUocOXL7AkkW80vkBY1YiOvbWu0xr_T5k6S_g0esb2XR2aU HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_XTjBQJ6d5GjQBWtE1eAYYfeF4N--4VXtN-4p8onNEKI.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJx1UQFuwyAM_FBYnjQdxE1oiI2MaZu9fqRrE7XbJGTpuLPvDAMMCStp72nCJYqWLuFr7bfSeZE58tiPSTzSDn2N7lx2GETCHCmruJOEWtwEHhLpoUeYnUk7uaObpchzP2jNSB8P2BWDxWIxlCdz3BwxbHHB4EKKbeC7y8auUq16ctbmOlo8DW_iS6Rr6e_1A2fcjiWgKrVQar0opC5DMSry9GLgwdzI_xM8BJvDL_7wCMJGbH-YTISh9ReChqkLovR8kEEl-2omvItPCaPbwAKdHZK1TrDwujSbXVW3dUocOXL7AkkW80vkBY1YiOvbWu0xr_T5k6S_g0esb2XR2aU HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_FRnVN-AoCmyVf7GM2IgM4mFbNtWA10a48WIBmHpcfz4.css?delta=0&language=en-us&theme=booking&include=eJxdjlsOwzAIBC_kxEeKsI0SGmJcA2lz-1ZV3z9Is6vRoocabjGBYkgiK9U5Jqchq_7zYB12ZMY-MM2LDbbg9rFmlgQc8GpMdY2lewMenxgYDnGbCmmWHfsRpWIWDg06zB3aoi_jk4xemycmXbCEnfCi8XHHTYozhiwdXxac4Pp-RZny-lOXLi25mdRwOvt9f3KawE2ybI3RMH7DDWAkbHg HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_wlzL92tq3Y-kWVegqog5qfqYh293MzssAGLxtcFfayQ.css?delta=1&language=en-us&theme=booking&include=eJxdjlsOwzAIBC_kxEeKsI0SGmJcA2lz-1ZV3z9Is6vRoocabjGBYkgiK9U5Jqchq_7zYB12ZMY-MM2LDbbg9rFmlgQc8GpMdY2lewMenxgYDnGbCmmWHfsRpWIWDg06zB3aoi_jk4xemycmXbCEnfCi8XHHTYozhiwdXxac4Pp-RZny-lOXLi25mdRwOvt9f3KawE2ybI3RMH7DDWAkbHg HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_H7dPp81WTvvS--0HVXMJ9Hozig2DMTF7X1aURkZvL00.css?delta=2&language=en-us&theme=booking&include=eJxdjlsOwzAIBC_kxEeKsI0SGmJcA2lz-1ZV3z9Is6vRoocabjGBYkgiK9U5Jqchq_7zYB12ZMY-MM2LDbbg9rFmlgQc8GpMdY2lewMenxgYDnGbCmmWHfsRpWIWDg06zB3aoi_jk4xemycmXbCEnfCi8XHHTYozhiwdXxac4Pp-RZny-lOXLi25mdRwOvt9f3KawE2ybI3RMH7DDWAkbHg HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en-us&theme=booking&include=eJxdjlsOwzAIBC_kxEeKsI0SGmJcA2lz-1ZV3z9Is6vRoocabjGBYkgiK9U5Jqchq_7zYB12ZMY-MM2LDbbg9rFmlgQc8GpMdY2lewMenxgYDnGbCmmWHfsRpWIWDg06zB3aoi_jk4xemycmXbCEnfCi8XHHTYozhiwdXxac4Pp-RZny-lOXLi25mdRwOvt9f3KawE2ybI3RMH7DDWAkbHg HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/bui/9.5.6/bui.min.js HTTP/1.1Host: bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/OtAutoBlock.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/initiator.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon/bookingdotcomb2b/booking_prod/scripts/evergage.min.js HTTP/1.1Host: cdn.evgnet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optimize.js?id=GTM-MVTHSWF HTTP/1.1Host: www.googleoptimize.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_XTjBQJ6d5GjQBWtE1eAYYfeF4N--4VXtN-4p8onNEKI.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJx1UQFuwyAM_FBYnjQdxE1oiI2MaZu9fqRrE7XbJGTpuLPvDAMMCStp72nCJYqWLuFr7bfSeZE58tiPSTzSDn2N7lx2GETCHCmruJOEWtwEHhLpoUeYnUk7uaObpchzP2jNSB8P2BWDxWIxlCdz3BwxbHHB4EKKbeC7y8auUq16ctbmOlo8DW_iS6Rr6e_1A2fcjiWgKrVQar0opC5DMSry9GLgwdzI_xM8BJvDL_7wCMJGbH-YTISh9ReChqkLovR8kEEl-2omvItPCaPbwAKdHZK1TrDwujSbXVW3dUocOXL7AkkW80vkBY1YiOvbWu0xr_T5k6S_g0esb2XR2aU HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js__JAsomIqNPkRGM4sKLB0ixqwxSWA7z7kGPNbFsSL2oQ.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJx1UQFuwyAM_FBYnjQdxE1oiI2MaZu9fqRrE7XbJGTpuLPvDAMMCStp72nCJYqWLuFr7bfSeZE58tiPSTzSDn2N7lx2GETCHCmruJOEWtwEHhLpoUeYnUk7uaObpchzP2jNSB8P2BWDxWIxlCdz3BwxbHHB4EKKbeC7y8auUq16ctbmOlo8DW_iS6Rr6e_1A2fcjiWgKrVQar0opC5DMSry9GLgwdzI_xM8BJvDL_7wCMJGbH-YTISh9ReChqkLovR8kEEl-2omvItPCaPbwAKdHZK1TrDwujSbXVW3dUocOXL7AkkW80vkBY1YiOvbWu0xr_T5k6S_g0esb2XR2aU HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04.js HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202408.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/lazysizes.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/main.c636cd6f230e77b0ec49.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/me.3be17e89a86b43ce8259.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/initiator.js HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/bui/9.5.6/bui.min.js HTTP/1.1Host: bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/0191ffb2-0224-7614-89a9-ce4becc49775/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202408.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/favicons/favicon.svg HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/lazysizes.min.js HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/me.3be17e89a86b43ce8259.js HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kindly-chat.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/favicons/site.webmanifest HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/favicons/favicon.ico HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rc/19174/scripts/s.js HTTP/1.1Host: cdn.spinnaker-js.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/main.c636cd6f230e77b0ec49.js HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202408.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/huge_slider_teaser/public/2024-05/gettyimages-1463514567.jpg.webp?h=7bb33798&itok=WPHXrhlG HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/favicons/favicon.svg HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/0191ffb2-0224-7614-89a9-ce4becc49775/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /KindlyChat-9494821c54747297c59d.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kindly-chat.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/favicons/favicon.ico HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/huge_slider_teaser/public/2021-10/asset_3322x_1.png.webp?h=fc105f81&itok=m7bDoMBP HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page
Source: global traffic	HTTP traffic detected: GET /shared/commons.9b20dd57c6f12e1beb80.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202408.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /KindlyChat-9494821c54747297c59d.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rc/19174/scripts/s.js HTTP/1.1Host: cdn.spinnaker-js.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/1c3b2b43-3257-4296-9e16-fc1cde2627de.json?version=2.61.3&kindly-chat-browser-id=79f6a3a6-8bce-4ea3-a3f8-cd5888d60f05 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1
Source: global traffic	HTTP traffic detected: GET /v1/ua-parser HTTP/1.1Host: dcinfos-cache.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/geoip?weather=false HTTP/1.1Host: dcinfos-cache.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/image_teaser_desktop/public/2019-08/retrieved_this_image_to_complete_the_payments_page-1053633976.jpg.webp?h=58c8a5e7&itok=eFmn4h1J HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/1282195.1589624.json?74385f15d5e6f186fc56290709b8b7cf HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/huge_slider_teaser/public/2021-10/asset_3322x_1.png.webp?h=fc105f81&itok=m7bDoMBP HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936
Source: global traffic	HTTP traffic detected: GET /shared/commons.9b20dd57c6f12e1beb80.js HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/1282195.1589625.json?74385f15d5e6f186fc56290709b8b7cf HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /register?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y HTTP/1.1Host: account.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/1c3b2b43-3257-4296-9e16-fc1cde2627de.json?version=2.61.3&kindly-chat-browser-id=79f6a3a6-8bce-4ea3-a3f8-cd5888d60f05 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ua-parser HTTP/1.1Host: dcinfos-cache.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/geoip?weather=false HTTP/1.1Host: dcinfos-cache.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/image_teaser_desktop/public/2024-09/travel_proud_summum_hotel-min.jpg.webp?h=c9c37514&itok=BYpOVCvD HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/1282195.1589624.json?74385f15d5e6f186fc56290709b8b7cf HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/analytics.707dba925225f9410975.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/1282195.1589625.json?74385f15d5e6f186fc56290709b8b7cf HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/image_teaser_desktop/public/2019-08/retrieved_this_image_to_complete_the_payments_page-1053633976.jpg.webp?h=58c8a5e7&itok=eFmn4h1J HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22}; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}
Source: global traffic	HTTP traffic detected: GET /psb/accountsportal/assets/287_c32002792e35c69191e8.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/accountsportal/assets/646_8e0f43f6ce9d2e229cb8.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/accountsportal/assets/57_7bdf6faf45bc50479844.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=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%3D%3D HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /src/assets/fonts/IBMPlexSans-Medium.c4877bdfa15aef22d9255288b16899c5.ttf HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://partner.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/image_teaser_desktop/public/2024-09/travel_proud_summum_hotel-min.jpg.webp?h=c9c37514&itok=BYpOVCvD HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /shared/analytics.707dba925225f9410975.js HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=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%3D%3D HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTGCORS=Z57RzXgVFXqx/nuCt7+ZfB2FPl3hppM0rHO9z7yCWC1Dj3cI2OzxB9zfWeB0g/x2a4KcNvn6f4xyBduPiaTOnSHmPLlM3rXFZtQ8cHTs8yc5y9zQRxKJCyiz3ziccJkrF007PjcNaQ8I/vUUkIOxUdgmh10Tc0m2riGsPF7j/snVu1GSuQ4=
Source: global traffic	HTTP traffic detected: GET /design-assets/assets/v3.58.1/fonts-brand/BookingExtraBold.woff HTTP/1.1Host: t-cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cf.bstatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: account.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.booking.com/register?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8yAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; bkng_ap=U2FsdGVkX1%2BdFzJeFzqX%2FIN9j8HtXeMw1TJchm%2Bxe1mgbx9Iv8R3KtjolKocSDeip927ASm54vz4%0A13BgXwQnPg%3D%3D%0A; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ariane.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/node/27/?utm_content=27&utm_source=extranet_login_page HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /en-us/community?utm_content=27&utm_source=extranet_login_page HTTP/1.1Host: partner.booking.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js__JAsomIqNPkRGM4sKLB0ixqwxSWA7z7kGPNbFsSL2oQ.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJxdUAGOgzAM-xA5njSlJaM92qZKU7jd6y-wG2iTEJLt2Ek9oWLCB8noKOAaWdqQ8Pcx7r_BMS-xzOOc2GE6oesRvtsJPbNfIlVhuLPvDQKWKZFc8-gXULavDvSjKZZlnKRXTF__cGiKGptG317KxVxnaAavCD5FC_zcsqsP7todgVouUHY0fQyvkbZ2i-UeS1S6NS-c0niw8GLhyQ6CSmMvKxsVKFWzH9QGGnp2rddzN3rPMkUuoOgsKVsZK2Uq2t5a2_PBc65c3rQWeANMV8UeRbg3SvYUbCRQUXAWrGGwTfQqaRKurqtyOZ33hDPsIKMslqlmxsLlkS3vnOp7ZotziXYyc9JY34rMaILd3z_6s4I3q41QfBgPAE9wugPhtGcf7B_cGurl HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_c88WbGbh9NstFyu6wAAybsy5n3dfKyLDxEf5i4Ft0Rs.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJxdUAGOgzAM-xA5njSlJaM92qZKU7jd6y-wG2iTEJLt2Ek9oWLCB8noKOAaWdqQ8Pcx7r_BMS-xzOOc2GE6oesRvtsJPbNfIlVhuLPvDQKWKZFc8-gXULavDvSjKZZlnKRXTF__cGiKGptG317KxVxnaAavCD5FC_zcsqsP7todgVouUHY0fQyvkbZ2i-UeS1S6NS-c0niw8GLhyQ6CSmMvKxsVKFWzH9QGGnp2rddzN3rPMkUuoOgsKVsZK2Uq2t5a2_PBc65c3rQWeANMV8UeRbg3SvYUbCRQUXAWrGGwTfQqaRKurqtyOZ33hDPsIKMslqlmxsLlkS3vnOp7ZotziXYyc9JY34rMaILd3z_6s4I3q41QfBgPAE9wugPhtGcf7B_cGurl HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_QImxwfPMAJCQdpMj3YFNMdrqCslQk6o0saCwVvpNQgk.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxdUAGOgzAM-xA5njSlJaM92qZKU7jd6y-wG2iTEJLt2Ek9oWLCB8noKOAaWdqQ8Pcx7r_BMS-xzOOc2GE6oesRvtsJPbNfIlVhuLPvDQKWKZFc8-gXULavDvSjKZZlnKRXTF__cGiKGptG317KxVxnaAavCD5FC_zcsqsP7todgVouUHY0fQyvkbZ2i-UeS1S6NS-c0niw8GLhyQ6CSmMvKxsVKFWzH9QGGnp2rddzN3rPMkUuoOgsKVsZK2Uq2t5a2_PBc65c3rQWeANMV8UeRbg3SvYUbCRQUXAWrGGwTfQqaRKurqtyOZ33hDPsIKMslqlmxsLlkS3vnOp7ZotziXYyc9JY34rMaILd3z_6s4I3q41QfBgPAE9wugPhtGcf7B_cGurl HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optimize.js?id=GTM-MVTHSWF HTTP/1.1Host: www.googleoptimize.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/js/dist/buiInitComponents.min.js?skeimg HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_QImxwfPMAJCQdpMj3YFNMdrqCslQk6o0saCwVvpNQgk.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxdUAGOgzAM-xA5njSlJaM92qZKU7jd6y-wG2iTEJLt2Ek9oWLCB8noKOAaWdqQ8Pcx7r_BMS-xzOOc2GE6oesRvtsJPbNfIlVhuLPvDQKWKZFc8-gXULavDvSjKZZlnKRXTF__cGiKGptG317KxVxnaAavCD5FC_zcsqsP7todgVouUHY0fQyvkbZ2i-UeS1S6NS-c0niw8GLhyQ6CSmMvKxsVKFWzH9QGGnp2rddzN3rPMkUuoOgsKVsZK2Uq2t5a2_PBc65c3rQWeANMV8UeRbg3SvYUbCRQUXAWrGGwTfQqaRKurqtyOZ33hDPsIKMslqlmxsLlkS3vnOp7ZotziXYyc9JY34rMaILd3z_6s4I3q41QfBgPAE9wugPhtGcf7B_cGurl HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A41+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_c88WbGbh9NstFyu6wAAybsy5n3dfKyLDxEf5i4Ft0Rs.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJxdUAGOgzAM-xA5njSlJaM92qZKU7jd6y-wG2iTEJLt2Ek9oWLCB8noKOAaWdqQ8Pcx7r_BMS-xzOOc2GE6oesRvtsJPbNfIlVhuLPvDQKWKZFc8-gXULavDvSjKZZlnKRXTF__cGiKGptG317KxVxnaAavCD5FC_zcsqsP7todgVouUHY0fQyvkbZ2i-UeS1S6NS-c0niw8GLhyQ6CSmMvKxsVKFWzH9QGGnp2rddzN3rPMkUuoOgsKVsZK2Uq2t5a2_PBc65c3rQWeANMV8UeRbg3SvYUbCRQUXAWrGGwTfQqaRKurqtyOZ33hDPsIKMslqlmxsLlkS3vnOp7ZotziXYyc9JY34rMaILd3z_6s4I3q41QfBgPAE9wugPhtGcf7B_cGurl HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A41+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js__JAsomIqNPkRGM4sKLB0ixqwxSWA7z7kGPNbFsSL2oQ.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJxdUAGOgzAM-xA5njSlJaM92qZKU7jd6y-wG2iTEJLt2Ek9oWLCB8noKOAaWdqQ8Pcx7r_BMS-xzOOc2GE6oesRvtsJPbNfIlVhuLPvDQKWKZFc8-gXULavDvSjKZZlnKRXTF__cGiKGptG317KxVxnaAavCD5FC_zcsqsP7todgVouUHY0fQyvkbZ2i-UeS1S6NS-c0niw8GLhyQ6CSmMvKxsVKFWzH9QGGnp2rddzN3rPMkUuoOgsKVsZK2Uq2t5a2_PBc65c3rQWeANMV8UeRbg3SvYUbCRQUXAWrGGwTfQqaRKurqtyOZ33hDPsIKMslqlmxsLlkS3vnOp7ZotziXYyc9JY34rMaILd3z_6s4I3q41QfBgPAE9wugPhtGcf7B_cGurl HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A41+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/js/dist/buiInitComponents.min.js?skeimg HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A41+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=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%3D HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTGCORS=/BYZVSkr1lo+UphpcQRT0HHnt34XQCm/lopQIe4c6+jMtLLMSsUlGEPoepig304nNBtRqGUNBuCbI98VfmI73C7hkRcegfdpNM0qqUbkvZJ7otCu+OF7SPqsCB1EQ7mzuyVq1InYURj5OeaEBmTzK/vulY5unOS2Lj9FUiPm9FDK98M4UEo=
Source: global traffic	HTTP traffic detected: GET /init?v=18.13&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&page=09264269a13011a279e80d7db3e808bfe44973a1&ret=0&u=5fb93d3ece5e4028cbd9a9e4565beb58&href=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page&url=community-500%7Cglobal%20partner%20community-27&ref=&title=Partner%20Community%20%E2%80%93%20Partner%20Forum%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=1727325522669&pxr=1&gdpr=0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/optimized/HeroCommunityRight.png HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325522669\|\|0\|\|\|\|0\|18.13\|81.49835; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/optimized/HeroCommunityLeft.png HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325522669\|\|0\|\|\|\|0\|18.13\|81.49835; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=1&pvis=1&th=1282195.1589625.1.1.1.1.1727325513382.1727325513382.1.1; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-LVHK6H547B&gacid=730034488.1727325523&gtm=45je49n0v889588973z8811498483za200zb811498483&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101671035~101747727&z=865055220 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=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%3D HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTG=/BYZVSkr1lo+UphpcQRT0HHnt34XQCm/lopQIe4c6+jMtLLMSsUlGEPoepig304nNBtRqGUNBuCbI98VfmI73C7hkRcegfdpNM0qqUbkvZJ7otCu+OF7SPqsCB1EQ7mzuyVq1InYURj5OeaEBmTzK/vulY5unOS2Lj9FUiPm9FDK98M4UEo=; AWSALBTGCORS=F5JfxXOH7wgb6nhHyOnOCHouLYyG06JAgFLkeKwRJJnLqSIF2HDI/vWA1p8SukYvT3zla8roWi2HCeEKSiTb4WhWGILg/LA1EaWgw9+NT4ZOSxBMEFessBOhwaDHK7oQOXXyIjDIFNaXz1Us7/b9pdDnRpbbp+eXeE5jKb1Ifclk/i9uE9U=
Source: global traffic	HTTP traffic detected: GET /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325522669\|\|0\|\|\|\|0\|18.13\|81.49835; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; _ga=GA1.1.730034488.1727325523; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325522.60.0.0; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1
Source: global traffic	HTTP traffic detected: GET /init?v=18.13&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&page=09264269a13011a279e80d7db3e808bfe44973a1&ret=0&u=5fb93d3ece5e4028cbd9a9e4565beb58&href=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page&url=community-500%7Cglobal%20partner%20community-27&ref=&title=Partner%20Community%20%E2%80%93%20Partner%20Forum%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=1727325522669&pxr=1&gdpr=0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "fede6ed960c1cefeef844d1b35b2ff64"If-Modified-Since: Tue, 24 Sep 2024 14:11:42 GMT
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/optimized/HeroCommunityRight.png HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325522669\|\|0\|\|\|\|0\|18.13\|81.49835; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325523.59.0.0
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/optimized/HeroCommunityLeft.png HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325522669\|\|0\|\|\|\|0\|18.13\|81.49835; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325523.59.0.0
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "fede6ed960c1cefeef844d1b35b2ff64"If-Modified-Since: Tue, 24 Sep 2024 14:11:42 GMT
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ariane.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/137657823624702?v=2.9.168&r=stable&domain=partner.booking.com&hme=3ba426d944c98eb3ce406a0f93fc097d0320a486b65b445a33b2eda3a5aa3429&ex_m=70%2C119%2C105%2C109%2C61%2C4%2C98%2C69%2C16%2C95%2C87%2C51%2C54%2C170%2C173%2C185%2C181%2C182%2C184%2C29%2C99%2C53%2C76%2C183%2C165%2C168%2C178%2C179%2C186%2C129%2C41%2C34%2C141%2C15%2C50%2C192%2C191%2C131%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C91%2C17%2C14%2C94%2C90%2C89%2C106%2C52%2C108%2C39%2C107%2C30%2C92%2C26%2C166%2C169%2C138%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C74%2C100%2C27%2C75%2C9%2C8%2C79%2C48%2C21%2C102%2C101%2C103%2C96%2C10%2C20%2C3%2C38%2C19%2C84%2C56%2C82%2C33%2C73%2C0%2C93%2C32%2C81%2C86%2C47%2C46%2C85%2C37%2C5%2C88%2C80%2C44%2C35%2C83%2C2%2C36%2C63%2C42%2C104%2C45%2C78%2C68%2C110%2C60%2C59%2C31%2C97%2C58%2C55%2C49%2C77%2C72%2C24%2C111 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /html?website=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&session=dff57b6f2666f51928f3c546c03f2034&page=09264269a13011a279e80d7db3e808bfe44973a1&gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/137657823624702?v=2.9.168&r=stable&domain=partner.booking.com&hme=3ba426d944c98eb3ce406a0f93fc097d0320a486b65b445a33b2eda3a5aa3429&ex_m=70%2C119%2C105%2C109%2C61%2C4%2C98%2C69%2C16%2C95%2C87%2C51%2C54%2C170%2C173%2C185%2C181%2C182%2C184%2C29%2C99%2C53%2C76%2C183%2C165%2C168%2C178%2C179%2C186%2C129%2C41%2C34%2C141%2C15%2C50%2C192%2C191%2C131%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C91%2C17%2C14%2C94%2C90%2C89%2C106%2C52%2C108%2C39%2C107%2C30%2C92%2C26%2C166%2C169%2C138%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C74%2C100%2C27%2C75%2C9%2C8%2C79%2C48%2C21%2C102%2C101%2C103%2C96%2C10%2C20%2C3%2C38%2C19%2C84%2C56%2C82%2C33%2C73%2C0%2C93%2C32%2C81%2C86%2C47%2C46%2C85%2C37%2C5%2C88%2C80%2C44%2C35%2C83%2C2%2C36%2C63%2C42%2C104%2C45%2C78%2C68%2C110%2C60%2C59%2C31%2C97%2C58%2C55%2C49%2C77%2C72%2C24%2C111 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page&rl=&if=false&ts=1727325527582&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325523806&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page&rl=&if=false&ts=1727325527582&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325523806&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page&rl=&if=false&ts=1727325527582&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325523806&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/avatar_default/public/pictures/2023-03/SM_white2.png?itok=YFGfESXQ HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325526575\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835; _fbp=fb.1.1727325527576.891978143610399285
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/avatar_default/public/pictures/2024-03/Screenshot%202024-03-29%20at%2013.52.54.png?itok=YxsAmv9U HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325526575\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835; _fbp=fb.1.1727325527576.891978143610399285
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page&rl=&if=false&ts=1727325527582&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325523806&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/hospitality%404x.png.webp?itok=CnzaJ3-K HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325526575\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835; _fbp=fb.1.1727325527576.891978143610399285
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/property%20managment%404x.png.webp?itok=T_Oo2E2n HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325526575\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835; _fbp=fb.1.1727325527576.891978143610399285
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/new%20to%20booking%20revised%404x.png.webp?itok=DVVnxKHR HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325526575\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835; _fbp=fb.1.1727325527576.891978143610399285
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/announcements%404x.png.webp?itok=KL33QV-E HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325526575\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835; _fbp=fb.1.1727325527576.891978143610399285
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/avatar_default/public/pictures/2023-03/SM_white2.png?itok=YFGfESXQ HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/hospitality%404x.png.webp?itok=CnzaJ3-K HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/property%20managment%404x.png.webp?itok=T_Oo2E2n HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/avatar_default/public/pictures/2024-03/Screenshot%202024-03-29%20at%2013.52.54.png?itok=YxsAmv9U HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /account-recovery/options?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y HTTP/1.1Host: account.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; bkng_ap=U2FsdGVkX1%2BdFzJeFzqX%2FIN9j8HtXeMw1TJchm%2Bxe1mgbx9Iv8R3KtjolKocSDeip927ASm54vz4%0A13BgXwQnPg%3D%3D%0A; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/payments%404x.png.webp?itok=_sFO6dyI HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/interest%20and%20fun%20revised%404x.png.webp?itok=I5HNQ8B6 HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/announcements%404x.png.webp?itok=KL33QV-E HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/new%20to%20booking%20revised%404x.png.webp?itok=DVVnxKHR HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/events%404x.png.webp?itok=fwXvwvVL HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/other%20discussions%20revised%404x.png.webp?itok=Kuku6ycL HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/tools%20revised%404x.png.webp?itok=h9bc2CpN HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448
Source: global traffic	HTTP traffic detected: GET /psb/accountsportal/assets/287_c32002792e35c69191e8.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "95744d9b9384066e908e63bbad3a188b"If-Modified-Since: Tue, 24 Sep 2024 11:51:25 GMT
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/payments%404x.png.webp?itok=_sFO6dyI HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448
Source: global traffic	HTTP traffic detected: GET /psb/accountsportal/assets/646_8e0f43f6ce9d2e229cb8.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bb8ceb6de36112ba44b0b5cfe1f28976"If-Modified-Since: Tue, 24 Sep 2024 11:51:25 GMT
Source: global traffic	HTTP traffic detected: GET /psb/accountsportal/assets/57_7bdf6faf45bc50479844.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "4e901bc717369fcf6a754f468ccafe57"If-Modified-Since: Tue, 24 Sep 2024 11:51:25 GMT
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/interest%20and%20fun%20revised%404x.png.webp?itok=I5HNQ8B6 HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530186\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/events%404x.png.webp?itok=fwXvwvVL HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530760\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/tools%20revised%404x.png.webp?itok=h9bc2CpN HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530760\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_small_card_topics/public/2024-06/other%20discussions%20revised%404x.png.webp?itok=Kuku6ycL HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325530760\|2071166924_-791013993.-1539894552_1605\|0\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /vendors-react-chat_node_modules_react-hook-form_dist_index_esm_mjs-e239a5e9548842eefeb1.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420-e1a675876deb028268b2.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Chat-ce6034002afce55c96fc.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&p=09264269a13011a279e80d7db3e808bfe44973a1&v=18.13&pst=1727325524142&q=1&li=0&lh=0&ls=0&d=AABqAiMAAQAFAAOLAAECAV0CuQABLAPoA-gAaQIBRgLOAM0CAS8C4wEoAgEjAu4BjAIBAAMNAfYCAP0DEQOEEgAAA4QSAAEDhRIAAgOFEgADA4USAAQJCyYAAQAACcQCAoABswoiAgKLAcsKYCnEtgAAAAUKkAICkQHXCusCAqQB_wr8BgKnAgcABgtWAgKvAhcLVin8oHkWAAYLWQcCsQIbAAYLswICugIvDBcCAsICPwxVKZPABSwABwx6AgLRAl8M4AIC2wJzDUUCAuoCkw1FKesSJn8ACA2nAgLyAqMOCwIC_QK7DjwpoDpG7wAHDngCAwYCzw7UAgMWAu8PQwIDIwMLD6ACAy4DIw_-AgM4AzcQagIDPgNDFxoOAAAPShcsJgACAAAXOiYAAwAAF0QmAAQAABdSJgAFAAAYPAICgAGzGE0mAAYAABiXAgKIAboYzSYABwAAGPsCAqsB1hj8KeJIcS8ACRleAgLGAesZlCYACAAAGcICAtcB-RnwBgLkAgMAChn0KWGuBLoAChouAgL2AhEaigIDBwIfGroHAtgB-gAKGvECAroB4RrxKaN2q68ACxtaAgKVAcQcOgIDYwJpHFEphtq1PwAMHH8CAoABsxzuAgN5Ansc7im7fRpPAAcdJSYACQAAHUoCA5MCkB2iKB2jKgABAAD__wAfKAIDsgKoHysmAAoAAB8tKcipNLsAByMZJgALAAAm9yYADAAAJvgT.MDplbi11cw==,MTp2RTdRcQ==,MjpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,Mzo3Y0hNRA==,NDpFeHBlcmllbmNlIDE=,NTojYmxvY2stY29tbXVuaXR5c3RhdHMgPiBkaXY6WzNdID4gZGl2OlsyXQ==,NjojYmxvY2stY29tbXVuaXR5Y3RhcyA+IGE6WzJd,NzojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IGRpdiA+IGRpdiA+IGRpdjpbM10gPiBkaXY=,ODojY29tbXVuaXR5LW1hbmFnZXItdG9wLXBpY2tz,OTojYmxvY2stY29tbXVuaXR5c3RhdHMgPiBkaXY6WzNd,MTA6I2Jsb2NrLWNvbW11bml0eWN0YXMgPiBhOlszXQ==,MTE6I2Jsb2NrLWNvbW11bml0eXN0YXRz,MTI6I2Jsb2NrLWJvb2tpbmctY29udGVudCA+IGFydGljbGUgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXY=.bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendors-react-chat_node_modules_react-hook-form_dist_index_esm_mjs-e239a5e9548842eefeb1.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420-e1a675876deb028268b2.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Chat-ce6034002afce55c96fc.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /src/assets/fonts/IBMPlexSans-Regular.2c412e2f77ae69aa2154613095be7130.ttf HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://partner.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&p=09264269a13011a279e80d7db3e808bfe44973a1&v=18.13&pst=1727325524142&q=1&li=0&lh=0&ls=0&d=AABqAiMAAQAFAAOLAAECAV0CuQABLAPoA-gAaQIBRgLOAM0CAS8C4wEoAgEjAu4BjAIBAAMNAfYCAP0DEQOEEgAAA4QSAAEDhRIAAgOFEgADA4USAAQJCyYAAQAACcQCAoABswoiAgKLAcsKYCnEtgAAAAUKkAICkQHXCusCAqQB_wr8BgKnAgcABgtWAgKvAhcLVin8oHkWAAYLWQcCsQIbAAYLswICugIvDBcCAsICPwxVKZPABSwABwx6AgLRAl8M4AIC2wJzDUUCAuoCkw1FKesSJn8ACA2nAgLyAqMOCwIC_QK7DjwpoDpG7wAHDngCAwYCzw7UAgMWAu8PQwIDIwMLD6ACAy4DIw_-AgM4AzcQagIDPgNDFxoOAAAPShcsJgACAAAXOiYAAwAAF0QmAAQAABdSJgAFAAAYPAICgAGzGE0mAAYAABiXAgKIAboYzSYABwAAGPsCAqsB1hj8KeJIcS8ACRleAgLGAesZlCYACAAAGcICAtcB-RnwBgLkAgMAChn0KWGuBLoAChouAgL2AhEaigIDBwIfGroHAtgB-gAKGvECAroB4RrxKaN2q68ACxtaAgKVAcQcOgIDYwJpHFEphtq1PwAMHH8CAoABsxzuAgN5Ansc7im7fRpPAAcdJSYACQAAHUoCA5MCkB2iKB2jKgABAAD__wAfKAIDsgKoHysmAAoAAB8tKcipNLsAByMZJgALAAAm9yYADAAAJvgT.MDplbi11cw==,MTp2RTdRcQ==,MjpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,Mzo3Y0hNRA==,NDpFeHBlcmllbmNlIDE=,NTojYmxvY2stY29tbXVuaXR5c3RhdHMgPiBkaXY6WzNdID4gZGl2OlsyXQ==,NjojYmxvY2stY29tbXVuaXR5Y3RhcyA+IGE6WzJd,NzojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IGRpdiA+IGRpdiA+IGRpdjpbM10gPiBkaXY=,ODojY29tbXVuaXR5LW1hbmFnZXItdG9wLXBpY2tz,OTojYmxvY2stY29tbXVuaXR5c3RhdHMgPiBkaXY6WzNd,MTA6I2Jsb2NrLWNvbW11bml0eWN0YXMgPiBhOlszXQ==,MTE6I2Jsb2NrLWNvbW11bml0eXN0YXRz,MTI6I2Jsb2NrLWJvb2tpbmctY29udGVudCA+IGFydGljbGUgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXY=.bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/stats/bot/6825/public/current_wait_time?sources%5B%5D=web HTTP/1.1Host: sage.kindly.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/stats/bot/6825/public/current_wait_time?sources%5B%5D=web HTTP/1.1Host: sage.kindly.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxBsACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ&sid=930746e7f78d5b33410375991db31657 HTTP/1.1Host: www.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835
Source: global traffic	HTTP traffic detected: GET /content/privacy.html?label=gen173bo-1BCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AEB6AEBiAIBmAIhqAIDuAKC4pmxBsACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBeACAQ&sid=e07102229068cd1d162244dd890d4359&keep_landing=1& HTTP/1.1Host: www.booking.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5ucBUJIY4I%2BRqQHlm%2BXkUP%2FwA8YttJyi8m7M5XiJvPhJJGLtih%2BGv23A3XjmXLSRkOubUdTkTgrRM%2Bu6xED9LpL3T%2BYNRt47KjoQ3TOgfry4ZdKvBCnL%2BnZ7tnIIKCu5nH5%2FLW3cI0tCzwveoCUMzYPqeUpUkrdH58%3D
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/core-deps-inlinedet_cloudfront_sd/f62025e692b596dd53ecd1bd082dfd3197944c50.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main_cloudfront_sd/64690f9ca8f09bbd00b39054c92889b07e67f550.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/searchbox_cloudfront_sd/8c409b90db8d2ce96d4f48a8b2eca3f43a705428.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/css/client.8f9edc6d.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff0aa81.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/css/256aa323.b7ebf6c0.chunk.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/static_cloudfront_sd.iq_ltr/e7d89fbf1d621385f416c64b2a5444ca3fb10712.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/privacy-consent/releases/2.1.56/customer/cookie-banner.min.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/sp-on-maps_cloudfront_sd/1d69e13e40d03fc59f58d76b31735d5d8c37416a.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff0aa81.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/core-deps-inlinedet_cloudfront_sd/f62025e692b596dd53ecd1bd082dfd3197944c50.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/searchbox_cloudfront_sd/8c409b90db8d2ce96d4f48a8b2eca3f43a705428.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/flags/new/48-squared/us/fa2b2a0e643c840152ba856a8bb081c7ded40efa.png HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main_cloudfront_sd/64690f9ca8f09bbd00b39054c92889b07e67f550.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/content_cloudfront_sd/ece690fd13c824529e3870e0e662c417931b8461.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/plugable-access-form_cloudfront_sd/3ae2aaac8c7322f2908109b6a9e7446001225f2b.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/privacy-consent/releases/2.1.56/customer/cookie-banner.min.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/sp-on-maps_cloudfront_sd/1d69e13e40d03fc59f58d76b31735d5d8c37416a.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/flags/new/48-squared/us/fa2b2a0e643c840152ba856a8bb081c7ded40efa.png HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/booking-iconset-original/29bca18dce5a8e111855e31314a9b1d750ea9beb.woff2 HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&p=09264269a13011a279e80d7db3e808bfe44973a1&v=18.13&pst=1727325524142&q=2&li=8087&lh=907&ls=0&d=ACyKACcAAQICgAGzABkoABkqAAAAAP__AAOlKYRQsr0ADBmWJgANAAAinRM..bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /*Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c360/v1/track HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCooz5zrZF8CS3UjeXLlc%2Fil773j8NiRZVCSRAEk0JK8oAo7Q%2FD7LUyt3%2FTdlMsi8WgpNYkNtzqRpJwLzI%2Btt7aNxGnp8Iza4flWIHQbC8mm%2BIXzsKUKRhjlZryH4u3Uq4IbquHg1d72kcj%2Fitb6BxR56hwh%2BPHcbxc%3D
Source: global traffic	HTTP traffic detected: GET /static/js/content_cloudfront_sd/ece690fd13c824529e3870e0e662c417931b8461.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/plugable-access-form_cloudfront_sd/3ae2aaac8c7322f2908109b6a9e7446001225f2b.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/booking-iconset/ca3edd97ae7e70e02d4deab5e4f53caf934229e1.woff HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/client.cdce4d89.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&p=09264269a13011a279e80d7db3e808bfe44973a1&v=18.13&pst=1727325524142&q=2&li=8087&lh=907&ls=0&d=ACyKACcAAQICgAGzABkoABkqAAAAAP__AAOlKYRQsr0ADBmWJgANAAAinRM..bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy-consents/implicit HTTP/1.1Host: account.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; bkng_ap=U2FsdGVkX19DVwHmxNSeokTng95fHY3wbRvwnBvwYHqoslZSD9GvKblsQhkf7AMvRuK5ZAtPSVab%0Ai4dYE0fQFA%3D%3D%0A; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCooz5zrZF8CS3UjeXLlc%2Fil773j8NiRZVCSRAEk0JK8oAo7Q%2FD7LUyt3%2FTdlMsi8WgpNYkNtzqRpJwLzI%2Btt7aNxGnp8Iza4flWIHQbC8mm%2BIXzsKUKRhjlZryH4u3Uq4IbquHg1d72kcj%2Fitb6BxR56hwh%2BPHcbxc%3D; bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJzZXNzaW9ucyI6W10sImRhdGFfc3ViamVjdF9pZCI6IjY4YjlkNGZjLWNlMzgtNDU2Ny1iNzIzLWU2NjE3NTVhNzU4ZiJ9fQ; bkng_sso_session=e30; bkng_sso_ses=e30
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/034e4287.b3397dfb.chunk.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/a72063b1.a2509705.chunk.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/256aa323.fe0ce82a.chunk.js HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo?ver=1&sid=e07102229068cd1d162244dd890d4359&t=17273255371 HTTP/1.1Host: www.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/content/privacy.html?label=gen173bo-1BCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AEB6AEBiAIBmAIhqAIDuAKC4pmxBsACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBeACAQ&sid=e07102229068cd1d162244dd890d4359&keep_landing=1&Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCooz5zrZF8CS3UjeXLlc%2Fil773j8NiRZVCSRAEk0JK8oAo7Q%2FD7LUyt3%2FTdlMsi8WgpNYkNtzqRpJwLzI%2Btt7aNxGnp8Iza4flWIHQbC8mm%2BIXzsKUKRhjlZryH4u3Uq4IbquHg1d72kcj%2Fitb6BxR56hwh%2BPHcbxc%3D; bkng_sso_session=e30; bkng_sso_ses=e30; OptanonConsent=implicitConsentCountry=nonGDPR&implicitConsentDate=1727325544895
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.2.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/explorer/booking-iconset/e133f2b3f9778b23512ad50c3d726c068cf41f7c.ttf HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=206533-206533If-Range: "5cadd1cc-375af"
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/034e4287.b3397dfb.chunk.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/a72063b1.a2509705.chunk.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo?ver=1&sid=e07102229068cd1d162244dd890d4359&t=17273255371 HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCooz5zrZF8CS3UjeXLlc%2Fil773j8NiRZVCSRAEk0JK8oAo7Q%2FD7LUyt3%2FTdlMsi8WgpNYkNtzqRpJwLzI%2Btt7aNxGnp8Iza4flWIHQbC8mm%2BIXzsKUKRhjlZryH4u3Uq4IbquHg1d72kcj%2Fitb6BxR56hwh%2BPHcbxc%3D; bkng_sso_session=e30; bkng_sso_ses=e30; OptanonConsent=implicitConsentCountry=nonGDPR&implicitConsentDate=1727325544895; lastSeen=1727325546129; BJS=-
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/client.cdce4d89.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design-assets/assets/v3.109.6/fonts-brand/BookingBold.woff HTTP/1.1Host: t-cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cf.bstatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/256aa323.fe0ce82a.chunk.js HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design-assets/assets/v3.109.6/fonts-brand/BookingRegular.woff HTTP/1.1Host: t-cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cf.bstatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js_tracking?ref_action=content&ver=2&stype=1&lang=en-us&pid=7c1720b0bbab0384&ete=&etg=&etcg=eWfCDMeICKFNcfEEHFRT\|4&ets=&etgwv= HTTP/1.1Host: www.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Booking-ET-Serialized-State: EjEveXch6BQR8thoc9lSOFrAuGECIGvUHB3YhGfIzUjDDyuasYjoKUk-GfgBA5SsCX-Booking-Language-Code: en-usX-Booking-Client-Info: sec-ch-ua-mobile: ?0X-Booking-AID: 304142User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Booking-Pageview-Id: 7c1720b0bbab0384X-Booking-Info: X-Booking-SiteType-Id: 1X-Booking-Session-Id: 8274bd8392a67bc6fff86c971e5b9183sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.booking.com/content/privacy.html?label=gen173bo-1BCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AEB6AEBiAIBmAIhqAIDuAKC4pmxBsACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBeACAQ&sid=e07102229068cd1d162244dd890d4359&keep_landing=1&Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCooz5zrZF8CS3UjeXLlc%2Fil773j8NiRZVCSRAEk0JK8oAo7Q%2FD7LUyt3%2FTdlMsi8WgpNYkNtzqRpJwLzI%2Btt7aNxGnp8Iza4flWIHQbC8mm%2BIXzsKUKRhjlZryH4u3Uq4IbquHg1d72kcj%2Fitb6BxR56hwh%2BPHcbxc%3D; bkng_sso_session=e30; bkng_sso_ses=e30; OptanonConsent=implicitConsentCountry=nonGDPR&implicitConsentDate=1727325544895; lastSeen=1727325546129; BJS=-
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.2.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/0191998d-4ea0-7a35-bbae-232aa21682f6/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js_tracking?ref_action=content&ver=2&stype=1&lang=en-us&pid=7c1720b0bbab0384&ete=&etg=&etcg=eWfCDMeICKFNcfEEHFRT\|4&ets=&etgwv= HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCooz5zrZF8CS3UjeXLlc%2Fil773j8NiRZVCSRAEk0JK8oAo7Q%2FD7LUyt3%2FTdlMsi8WgpNYkNtzqRpJwLzI%2Btt7aNxGnp8Iza4flWIHQbC8mm%2BIXzsKUKRhjlZryH4u3Uq4IbquHg1d72kcj%2Fitb6BxR56hwh%2BPHcbxc%3D; bkng_sso_session=e30; bkng_sso_ses=e30; OptanonConsent=implicitConsentCountry=nonGDPR&implicitConsentDate=1727325544895; BJS=-; _gat=1; lastSeen=0
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-116109-18&cid=730034488.1727325523&jid=1268321671&gjid=417170292&_gid=977767972.1727325523&_u=SCCAgAIJAAAAAGgMI~&z=661798376 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.css HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.2.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/0191998d-4ea0-7a35-bbae-232aa21682f6/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /node/2170?utm_source=account&utm_medium=support_link HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCooz5zrZF8CS3UjeXLlc%2Fil773j8NiRZVCSRAEk0JK8oAo7Q%2FD7LUyt3%2FTdlMsi8WgpNYkNtzqRpJwLzI%2Btt7aNxGnp8Iza4flWIHQbC8mm%2BIXzsKUKRhjlZryH4u3Uq4IbquHg1d72kcj%2Fitb6BxR56hwh%2BPHcbxc%3D; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=0
Source: global traffic	HTTP traffic detected: GET /static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_link HTTP/1.1Host: partner.booking.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=1727325550726; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3XAswj3R9QCravfGXjOZkG0AphyN7MOddWVpcigCyJigWmfEnD6YdZ6GXZgGl7STz0dzs0%2FgXnrKyJoQn%2Brgi6MrCEnSkrhJRJnNQXqRfZWDnexKP6rJy8bCIbKGPmSJoV2yJYDh1
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.2.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/challenge.js HTTP/1.1Host: d8c14d4960ca.edge.sdk.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js__JAsomIqNPkRGM4sKLB0ixqwxSWA7z7kGPNbFsSL2oQ.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJxtUItuwzAI_KGwfNKEbeqwOCYC3C77-jndmj42ybJ0HNxxJHQsuJGOgSY8s6gNBb-2cf-GIDJzzWMuErAcMDSGDztgFIkz06oCJ4nNYMKaCum9H-MMLv2tA3164TqPSduK5e0XDubobM7Rbsy9cugUwQTGiQIqBKz1wSP7AlSdfYNYuPu9LvHQcGa6_MtXcT5x7MZS_zRgjKJpZxyDAS898JmWrmlPl-HKDlGWVeoTZ1Gl9LAZ-mBWMusZdOiidMucVNbQ3KUeU6eCGXawoM6AxUkBq9RtkXbXbtbLxrly306kOK9PwRbsRF-1vRxnk3ahdyPUOI1XAD_gmJ4I0659rX4Daw7XvQ HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_linkAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/1px.gif HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_linkAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=1727325550726; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3XAswj3R9QCravfGXjOZkG0AphyN7MOddWVpcigCyJigWmfEnD6YdZ6GXZgGl7STz0dzs0%2FgXnrKyJoQn%2Brgi6MrCEnSkrhJRJnNQXqRfZWDnexKP6rJy8bCIbKGPmSJoV2yJYDh1%2FxhEuRe%2Bs9vhy7c9cmJ
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_yZ0PAvZXO0ru1hmXmW07BA0Jb_G9RSTBr-B-12JMTq0.css?delta=0&language=en-us&theme=booking&include=eJxdi0ESgyAMAD8E5UlOgAyikVCSOPr79lDHtsfdnZVTFLcQQdBF5rW2EqJVn0T-2euAHYlweKplVq8zbvdViCOQw0OptjXkYR3o8UHXYUAZ0Ge5ym0e1rpFqjJjdgQnm065SuIdxxm4YWJyiQdeax7co6ly-9GwwOGWp72vyeoEppx464SK4RteSxFfsw HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_linkAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=17
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_wlzL92tq3Y-kWVegqog5qfqYh293MzssAGLxtcFfayQ.css?delta=1&language=en-us&theme=booking&include=eJxdi0ESgyAMAD8E5UlOgAyikVCSOPr79lDHtsfdnZVTFLcQQdBF5rW2EqJVn0T-2euAHYlweKplVq8zbvdViCOQw0OptjXkYR3o8UHXYUAZ0Ge5ym0e1rpFqjJjdgQnm065SuIdxxm4YWJyiQdeax7co6ly-9GwwOGWp72vyeoEppx464SK4RteSxFfsw HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_linkAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=17
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/challenge.js HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_H7dPp81WTvvS--0HVXMJ9Hozig2DMTF7X1aURkZvL00.css?delta=2&language=en-us&theme=booking&include=eJxdi0ESgyAMAD8E5UlOgAyikVCSOPr79lDHtsfdnZVTFLcQQdBF5rW2EqJVn0T-2euAHYlweKplVq8zbvdViCOQw0OptjXkYR3o8UHXYUAZ0Ge5ym0e1rpFqjJjdgQnm065SuIdxxm4YWJyiQdeax7co6ly-9GwwOGWp72vyeoEppx464SK4RteSxFfsw HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_linkAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=17
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c360/v1/track HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=1727325550726; OptanonConsent=implicitConsentCountry=nonGDPR&implicitConsentDate=1727325544895&isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A39%3A11+GMT-0400+(Eastern+Daylight+Time)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=15eec4f6-401a-49db-9139-22dbf2073d05&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.booking.com%2Fcontent%2Fprivacy.html%3Flabel%3Dgen173bo-1BCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AEB6AEBiAIBmAIhqAIDuAKC4pmxBsACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBeACAQ%26sid%3De07102229068cd1d162244dd890d4359%26keep_landing%3D1%26&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecNZuGrj6ZhvAZCO2oDWpymUypkBYX%2BCbHaYlCykThCmq%2BuMw5MV7TxG3XtgDuZjXC89KWXR6tg1LevvI%2B75kmExkm%2B6Jq2Nslb7KFbzXUrk84UTzDBAZdLumN6XznbV4aI7KOHEeF2NvfTWqwBU3BHiuOIBnwXfww%3D
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_Q8NAk0jTt9eO4GPgsOJYH94Giwanjh5ZHujH1un7Wpk.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJxtUItuwzAI_KGwfNKEbeqwOCYC3C77-jndmj42ybJ0HNxxJHQsuJGOgSY8s6gNBb-2cf-GIDJzzWMuErAcMDSGDztgFIkz06oCJ4nNYMKaCum9H-MMLv2tA3164TqPSduK5e0XDubobM7Rbsy9cugUwQTGiQIqBKz1wSP7AlSdfYNYuPu9LvHQcGa6_MtXcT5x7MZS_zRgjKJpZxyDAS898JmWrmlPl-HKDlGWVeoTZ1Gl9LAZ-mBWMusZdOiidMucVNbQ3KUeU6eCGXawoM6AxUkBq9RtkXbXbtbLxrly306kOK9PwRbsRF-1vRxnk3ahdyPUOI1XAD_gmJ4I0659rX4Daw7XvQ HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_linkAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/1px.gif HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=1727325550726; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecNZuGrj6ZhvAZCO2oDWpymUypkBYX%2BCbHaYlCykThCmq%2BuMw5MV7TxG3XtgDuZjXC89KWXR6tg1LevvI%2B75kmExkm%2B6Jq2Nslb7KFbzXUrk84UTzDBAZdLumN6XznbV4aI7KOHEeF2NvfTWqwBU3BHiuOIBnwXfww%3D
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_ooZXA_g2yWkRTY6VjXVOhu3OgzJIDAvYwTIiG08O9t0.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxtUItuwzAI_KGwfNKEbeqwOCYC3C77-jndmj42ybJ0HNxxJHQsuJGOgSY8s6gNBb-2cf-GIDJzzWMuErAcMDSGDztgFIkz06oCJ4nNYMKaCum9H-MMLv2tA3164TqPSduK5e0XDubobM7Rbsy9cugUwQTGiQIqBKz1wSP7AlSdfYNYuPu9LvHQcGa6_MtXcT5x7MZS_zRgjKJpZxyDAS898JmWrmlPl-HKDlGWVeoTZ1Gl9LAZ-mBWMusZdOiidMucVNbQ3KUeU6eCGXawoM6AxUkBq9RtkXbXbtbLxrly306kOK9PwRbsRF-1vRxnk3ahdyPUOI1XAD_gmJ4I0659rX4Daw7XvQ HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_linkAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A38%3A42+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _ga=GA1.2.730034488.1727325523; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1727325522.1.0.1727325525.57.0.0; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325
Source: global traffic	HTTP traffic detected: GET /init?v=18.13&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&page=0926159434424f83d4d93b49e03a5b5e2e1c2bba&ret=0&u=5fb93d3ece5e4028cbd9a9e4565beb58&href=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fhelp%2Fsupport-contact%2Fcontact%2Fwhere-you-can-reach-us%3Futm_source%3Daccount%26utm_medium%3Dsupport_link&url=help-498%7Ccontact%20us-439%7Cwhere%20you%20can%20reach%20us-2170&ref=&title=Where%20you%20can%20reach%20us%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=1727325555494&pxr=1&gdpr=0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sidebar-banner-ajax-render/2170/node HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/html, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_linkAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=2&pvis=2&th=1282195.1589625.2.2.1.1.1727325513382.1727325522887.1.1; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=1727325550726; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecNZuGrj6ZhvAZCO2oDWpymUypkBYX%2BCbHaYlCykThCmq%2BuMw5MV7TxG3XtgDuZjXC89KWXR6tg1LevvI%2B75kmExkm%2B6Jq2Nslb7KFbzXUrk84UTzDBAZdLumN6XznbV4aI7KOHEeF2NvfTWqwBU3BHiuOIBnwXfww%3D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A39%3A14+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.730034488.1727325523; _ga_LVHK6H547B=GS1.1.1727325522.1.1.1727325555.27.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673$0926159434424f83d4d93b49e03a5b5e2e1c2bba.-6922053740.1727325556060\|17273
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJIZWxwIEFydGljbGUiLCJsb2NhbGUiOiJlbl9VUyIsInVybCI6Imh0dHBzOi8vcGFydG5lci5ib29raW5nLmNvbS9lbi11cy9oZWxwL3N1cHBvcnQtY29udGFjdC9jb250YWN0L3doZXJlLXlvdS1jYW4tcmVhY2gtdXM%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%3D%3D HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTGCORS=rsBk77cTIPB8pc8iIbVriBExCIiiZdrUXq+ISeGeh7sepfNjFBl9n8kbW0CXc3Zh30whFfRNHkg5zR+qFAq/mnVQi9jU1GDdy6utqjpVEn39psDVuTsgYowWbyJK04+XImCmIEBhk4zXg6akzZWY7cTTbmEooEUHw6f6e9AUtUGhT92PX9I=
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "fede6ed960c1cefeef844d1b35b2ff64"If-Modified-Since: Tue, 24 Sep 2024 14:11:42 GMT
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js__JAsomIqNPkRGM4sKLB0ixqwxSWA7z7kGPNbFsSL2oQ.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJxtUItuwzAI_KGwfNKEbeqwOCYC3C77-jndmj42ybJ0HNxxJHQsuJGOgSY8s6gNBb-2cf-GIDJzzWMuErAcMDSGDztgFIkz06oCJ4nNYMKaCum9H-MMLv2tA3164TqPSduK5e0XDubobM7Rbsy9cugUwQTGiQIqBKz1wSP7AlSdfYNYuPu9LvHQcGa6_MtXcT5x7MZS_zRgjKJpZxyDAS898JmWrmlPl-HKDlGWVeoTZ1Gl9LAZ-mBWMusZdOiidMucVNbQ3KUeU6eCGXawoM6AxUkBq9RtkXbXbtbLxrly306kOK9PwRbsRF-1vRxnk3ahdyPUOI1XAD_gmJ4I0659rX4Daw7XvQ HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=1727325550726; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecNZuGrj6ZhvAZCO2oDWpymUypkBYX%2BCbHaYlCykThCmq%2BuMw5MV7TxG3XtgDuZjXC89KWXR6tg1LevvI%2B75kmExkm%2B6Jq2Nslb7KFbzXUrk84UTzDBAZdLumN6XznbV4aI7KOHEeF2NvfTWqwBU3BHiuOIBnwXfww%3D; _ga=GA1.1.730034488.1727325523; _ga_LVHK6H547B=GS1.1.1727325522.1.1.1727325555.27.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673$0926159434424f83d4d93b49e03a5b5e2e1c2bba.-6922053740.1727325556060\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A39%3A16+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Fu
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_Q8NAk0jTt9eO4GPgsOJYH94Giwanjh5ZHujH1un7Wpk.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJxtUItuwzAI_KGwfNKEbeqwOCYC3C77-jndmj42ybJ0HNxxJHQsuJGOgSY8s6gNBb-2cf-GIDJzzWMuErAcMDSGDztgFIkz06oCJ4nNYMKaCum9H-MMLv2tA3164TqPSduK5e0XDubobM7Rbsy9cugUwQTGiQIqBKz1wSP7AlSdfYNYuPu9LvHQcGa6_MtXcT5x7MZS_zRgjKJpZxyDAS898JmWrmlPl-HKDlGWVeoTZ1Gl9LAZ-mBWMusZdOiidMucVNbQ3KUeU6eCGXawoM6AxUkBq9RtkXbXbtbLxrly306kOK9PwRbsRF-1vRxnk3ahdyPUOI1XAD_gmJ4I0659rX4Daw7XvQ HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=1727325550726; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecNZuGrj6ZhvAZCO2oDWpymUypkBYX%2BCbHaYlCykThCmq%2BuMw5MV7TxG3XtgDuZjXC89KWXR6tg1LevvI%2B75kmExkm%2B6Jq2Nslb7KFbzXUrk84UTzDBAZdLumN6XznbV4aI7KOHEeF2NvfTWqwBU3BHiuOIBnwXfww%3D; _ga=GA1.1.730034488.1727325523; _ga_LVHK6H547B=GS1.1.1727325522.1.1.1727325555.27.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673$0926159434424f83d4d93b49e03a5b5e2e1c2bba.-6922053740.1727325556060\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A39%3A16+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Fu
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_ooZXA_g2yWkRTY6VjXVOhu3OgzJIDAvYwTIiG08O9t0.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxtUItuwzAI_KGwfNKEbeqwOCYC3C77-jndmj42ybJ0HNxxJHQsuJGOgSY8s6gNBb-2cf-GIDJzzWMuErAcMDSGDztgFIkz06oCJ4nNYMKaCum9H-MMLv2tA3164TqPSduK5e0XDubobM7Rbsy9cugUwQTGiQIqBKz1wSP7AlSdfYNYuPu9LvHQcGa6_MtXcT5x7MZS_zRgjKJpZxyDAS898JmWrmlPl-HKDlGWVeoTZ1Gl9LAZ-mBWMusZdOiidMucVNbQ3KUeU6eCGXawoM6AxUkBq9RtkXbXbtbLxrly306kOK9PwRbsRF-1vRxnk3ahdyPUOI1XAD_gmJ4I0659rX4Daw7XvQ HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=1727325550726; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecNZuGrj6ZhvAZCO2oDWpymUypkBYX%2BCbHaYlCykThCmq%2BuMw5MV7TxG3XtgDuZjXC89KWXR6tg1LevvI%2B75kmExkm%2B6Jq2Nslb7KFbzXUrk84UTzDBAZdLumN6XznbV4aI7KOHEeF2NvfTWqwBU3BHiuOIBnwXfww%3D; _ga=GA1.1.730034488.1727325523; _ga_LVHK6H547B=GS1.1.1727325522.1.1.1727325555.27.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673$0926159434424f83d4d93b49e03a5b5e2e1c2bba.-6922053740.1727325556060\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A39%3A16+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Fu
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/challenge.js HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fhelp%2Fsupport-contact%2Fcontact%2Fwhere-you-can-reach-us%3Futm_source%3Daccount%26utm_medium%3Dsupport_link&rl=&if=false&ts=1727325556396&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325554479&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fhelp%2Fsupport-contact%2Fcontact%2Fwhere-you-can-reach-us%3Futm_source%3Daccount%26utm_medium%3Dsupport_link&rl=&if=false&ts=1727325556396&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325554479&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules/custom/booking_ckeditor_templates/svg/message_tip.svg HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_linkAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; lastSeen=1727325550726; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecNZuGrj6ZhvAZCO2oDWpymUypkBYX%2BCbHaYlCykThCmq%2BuMw5MV7TxG3XtgDuZjXC89KWXR6tg1LevvI%2B75kmExkm%2B6Jq2Nslb7KFbzXUrk84UTzDBAZdLumN6XznbV4aI7KOHEeF2NvfTWqwBU3BHiuOIBnwXfww%3D; _ga=GA1.1.730034488.1727325523; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673$0926159434424f83d4d93b49e03a5b5e2e1c2bba.-6922053740.1727325556060\|1727325535012\|2071166924_-791013993.-1539894552_1605\|1\|\|\|\|0\|18.13\|81.49835; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A39%3A16+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=3&pvis=3&th=1282195.158
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJIZWxwIEFydGljbGUiLCJsb2NhbGUiOiJlbl9VUyIsInVybCI6Imh0dHBzOi8vcGFydG5lci5ib29raW5nLmNvbS9lbi11cy9oZWxwL3N1cHBvcnQtY29udGFjdC9jb250YWN0L3doZXJlLXlvdS1jYW4tcmVhY2gtdXM%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%3D%3D HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTG=vGlbGH5l4u0Yv9OwNWweieQsmmDA+GHTECHBbaQ3cjLDaVvaAS6yrGwUl4YDr335A5bFY3ICTK/v3Ttnb3AdOuPrL/ukjZ62quWIPHfSAtiJlw27tCDE8crHrqmEc1Xw0MpcgNfgkaGrTWonesquviUv9MGM5IHyXS9BUpLLLnXJBElVOis=; AWSALBTGCORS=SuVolR3VBK88hIR4iqFVglWZrtmmQz3xMlnnFtQW1DhCI8b/FNjd9wW1MafTJGVRDOsEFpTKglkEpHGtEhhvpCxXQtLMbjrXkCmWzggaxu6V5WVBLm8JZx7O7L/H/zafIyG1srTAPGIp/Bel/IJc+Dj2ruDP2Vrq3RzvWg4fx618b551Bvk=
Source: global traffic	HTTP traffic detected: GET /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecNZuGrj6ZhvAZCO2oDWpymUypkBYX%2BCbHaYlCykThCmq%2BuMw5MV7TxG3XtgDuZjXC89KWXR6tg1LevvI%2B75kmExkm%2B6Jq2Nslb7KFbzXUrk84UTzDBAZdLumN6XznbV4aI7KOHEeF2NvfTWqwBU3BHiuOIBnwXfww%3D; _ga=GA1.1.730034488.1727325523; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A39%3A16+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=3&pvis=3&th=1282195.1589625.3.3.1.1.1727325513382.1727325556475.1.1; _ga_LVHK6H547B=GS1.1.1727325522.1.1.1727325558.24.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673$0926159434424f83d4d93b49e03a5b5e2e1c2bba.-6922053740.1727325556060\|1727325557584\|2071166924_3117648429.-1539894552_1605.1889642278_-1544719766\|1\|\|\|\|0\|18.13\|81.49835; lastSeen=1727325559253
Source: global traffic	HTTP traffic detected: GET /en-us/sidebar-banner-ajax-render/2170/node HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecNZuGrj6ZhvAZCO2oDWpymUypkBYX%2BCbHaYlCykThCmq%2BuMw5MV7TxG3XtgDuZjXC89KWXR6tg1LevvI%2B75kmExkm%2B6Jq2Nslb7KFbzXUrk84UTzDBAZdLumN6XznbV4aI7KOHEeF2NvfTWqwBU3BHiuOIBnwXfww%3D; _ga=GA1.1.730034488.1727325523; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A39%3A16+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=3&pvis=3&th=1282195.1589625.3.3.1.1.1727325513382.1727325556475.1.1; _ga_LVHK6H547B=GS1.1.1727325522.1.1.1727325558.24.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673$0926159434424f83d4d93b49e03a5b5e2e1c2bba.-6922053740.1727325556060\|1727325557584\|2071166924_3117648429.-1539894552_1605.1889642278_-1544719766\|1\|\|\|\|0\|18.13\|81.49835; lastSeen=1727325559253
Source: global traffic	HTTP traffic detected: GET /init?v=18.13&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&page=0926159434424f83d4d93b49e03a5b5e2e1c2bba&ret=0&u=5fb93d3ece5e4028cbd9a9e4565beb58&href=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fhelp%2Fsupport-contact%2Fcontact%2Fwhere-you-can-reach-us%3Futm_source%3Daccount%26utm_medium%3Dsupport_link&url=help-498%7Ccontact%20us-439%7Cwhere%20you%20can%20reach%20us-2170&ref=&title=Where%20you%20can%20reach%20us%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=1727325555494&pxr=1&gdpr=0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "fede6ed960c1cefeef844d1b35b2ff64"If-Modified-Since: Tue, 24 Sep 2024 14:11:42 GMT
Source: global traffic	HTTP traffic detected: GET /settings/1c3b2b43-3257-4296-9e16-fc1cde2627de.json?version=2.61.3&kindly-chat-browser-id=79f6a3a6-8bce-4ea3-a3f8-cd5888d60f05 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "516ca64a7a15ac1b954078e8e682da03"If-Modified-Since: Fri, 13 Sep 2024 12:20:31 GMT
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ariane.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fhelp%2Fsupport-contact%2Fcontact%2Fwhere-you-can-reach-us%3Futm_source%3Daccount%26utm_medium%3Dsupport_link&rl=&if=false&ts=1727325556396&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325554479&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fhelp%2Fsupport-contact%2Fcontact%2Fwhere-you-can-reach-us%3Futm_source%3Daccount%26utm_medium%3Dsupport_link&rl=&if=false&ts=1727325556396&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325554479&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules/custom/booking_ckeditor_templates/svg/message_tip.svg HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%22b4e22603e724eee2%22}; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3Df93c7d7f-65e5-421a-94be-d875624be5b9%26consentedAt%3D2024-09-26T04%3A38%3A33.910Z%26expiresAt%3D2025-03-25T04%3A38%3A33.910Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_auth=CAIQsOnuTRpmvJLZv3O5/V2DH0zRsmLxFv06YP7mX0vo13MHaJqEziT1CGy95Qyu0bvSXyJ9KSSe8/IJGs8tdjzSXAcYVQvJyaL1jZE5MuBitOxiK6x0wUt0+PqDb8WwfBdRekC84RN8rbsX8R1B; _sfid_2a26={%22anonymousId%22:%22b4e22603e724eee2%22%2C%22consents%22:[]}; mf_user=5fb93d3ece5e4028cbd9a9e4565beb58\|; _gid=GA1.2.977767972.1727325523; _gat_UA-6284728-15=1; _ga=GA1.3.730034488.1727325523; _gid=GA1.3.977767972.1727325523; _gat=1; Drupal.hideEntity__signinTooltip=true; _fbp=fb.1.1727325527576.891978143610399285; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page~1727325511936%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page~1727325530448; cors_js=1; bkng_sso_session=e30; bkng_sso_ses=e30; BJS=-; _gat=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecNZuGrj6ZhvAZCO2oDWpymUypkBYX%2BCbHaYlCykThCmq%2BuMw5MV7TxG3XtgDuZjXC89KWXR6tg1LevvI%2B75kmExkm%2B6Jq2Nslb7KFbzXUrk84UTzDBAZdLumN6XznbV4aI7KOHEeF2NvfTWqwBU3BHiuOIBnwXfww%3D; _ga=GA1.1.730034488.1727325523; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Sep+26+2024+00%3A39%3A16+GMT-0400+(Eastern+Daylight+Time)&version=202408.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=f32f0aa4-9184-4a00-8d3c-f2d86bd6418d&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=8v6d532sh1amgmds&fst=1727325511797&pst=-1&cst=1727325511797&ns=1&pvt=3&pvis=3&th=1282195.1589625.3.3.1.1.1727325513382.1727325556475.1.1; _ga_LVHK6H547B=GS1.1.1727325522.1.1.1727325558.24.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=dff57b6f2666f51928f3c546c03f2034\|09264269a13011a279e80d7db3e808bfe44973a1.-2582575373.1727325522673$0926159434424f83d4d93b49e03a5b5e2e1c2bba.-6922053740.1727325556060\|1727325557584\|2071166924_3117648429.-1539894552_1605.1889642278_-1544719766\|1\|\|\|\|0\|18.13\|81.49835; lastSeen=1727325559253; aws-waf-token=6488e3ae-8099-4315-a8fb-0aeca6d0650f:EQoAjhcfLMbfAAAA:WSEknhzi2yFAHgjmYiXscVYULgO7KBJAx5Zk6bCXu6S6TCAkX3m/xFvif9mRAe0q9Rojzu76RN3gS2K/QHUCb0mBo5NicgCHAfbDDCW3W6qPakPJSQQVygQ/+n9tJ+xVIo9bnL3p0hn0xq1LGzk2
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&p=0926159434424f83d4d93b49e03a5b5e2e1c2bba&v=18.13&pst=1727325558010&q=1&li=0&lh=0&ls=0&d=AACSAoUAAQAFAAOLAAIsA-gD6ARFKARFKgABAAD__wAFXQIChAG3BWEpxnuenwAABuQSAAEHGRIAAgcZEgADBxkSAAQHGRIABQ0uJgABAAAQRQ4AAAXzEH4mAAIAABCJJgADAAARBiYABAAAEjYmAAUAABI3JgAGAAASVyYABwAAElwmAAgAABNkJgAJAAATZiYACgAAE2cmAAsAABNoJgALAAAT7CYADAAAE_Epw62RSgAAE_kmAA0AABQlAgJxAasUoCgUoCoAAAAA__8BFQoCAm0BqRUMKb5seUoAABVFBgI0AYYABhVPAgI0AYYVlwcCIQF6AAYVtAICHQF4Ff0pnuw73AAHFqYCAfgBYBa5JgAOAAAWyCYADwAAFssmABAAABbQJgAQAAAXOgIB4QFSFzspjV_fEwAIFz8mABEAABfpKXrNcGAACBhhAgGsATIYuQIBhgEaGOQpbX0dWQAIGZwCAWgBCBmwJgASAAAZ6iYAEwAAGespXx-f8AAJGgsmABQAABoLJgAVAAAaDCYAFQAAGhcmABYAABoXJgAXAAAaGCYAFwAAGhkCAUoA9RoiJgAYAAAaIyYAGQAAGiQmABkAABouJgAaAAAaMCYAGwAAGjImABsAABo6JgAcAAAaOyYAHQAAGjsmAB0AABpIJgAeAAAaSSYAHwAAGkomAB8AABpYJgAgAAAaWSYAIQAAGlkmACEAABpsJgAiAAAabiYAIwAAGm8mACMAABqFJgAkAAAahyYAJQAAGogmACUAABqJAgE-AO4amyYAJgAAGp8mACcAABqgJgAnAAAaqSYAKAAAGqkmACkAABqqJgApAAAatiYAKgAAGrcmACsAABq5JgArAAA.MDojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXYgPiBkaXY6WzNdID4gZGl2ID4gZGl2ID4gZGl2ID4gcA==,MTplbi11cw==,Mjp2RTdRcQ==,MzpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,NDo3Y0hNRA==,NTpFeHBlcmllbmNlIDE=,NjojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXYgPiBkaXY6WzNdID4gZGl2ID4gZGl2ID4gZGl2ID4gcCA+IGE=,NzojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXY=,ODojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXYgPiBkaXY6WzJd,OTojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXYgPiBkaXY=.bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /*Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/1c3b2b43-3257-4296-9e16-fc1cde2627de.json?version=2.61.3&kindly-chat-browser-id=79f6a3a6-8bce-4ea3-a3f8-cd5888d60f05 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "516ca64a7a15ac1b954078e8e682da03"If-Modified-Since: Fri, 13 Sep 2024 12:20:31 GMT
Source: global traffic	HTTP traffic detected: GET /html?website=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&session=dff57b6f2666f51928f3c546c03f2034&page=0926159434424f83d4d93b49e03a5b5e2e1c2bba&gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/verify HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&p=0926159434424f83d4d93b49e03a5b5e2e1c2bba&v=18.13&pst=1727325558010&q=1&li=0&lh=0&ls=0&d=AACSAoUAAQAFAAOLAAIsA-gD6ARFKARFKgABAAD__wAFXQIChAG3BWEpxnuenwAABuQSAAEHGRIAAgcZEgADBxkSAAQHGRIABQ0uJgABAAAQRQ4AAAXzEH4mAAIAABCJJgADAAARBiYABAAAEjYmAAUAABI3JgAGAAASVyYABwAAElwmAAgAABNkJgAJAAATZiYACgAAE2cmAAsAABNoJgALAAAT7CYADAAAE_Epw62RSgAAE_kmAA0AABQlAgJxAasUoCgUoCoAAAAA__8BFQoCAm0BqRUMKb5seUoAABVFBgI0AYYABhVPAgI0AYYVlwcCIQF6AAYVtAICHQF4Ff0pnuw73AAHFqYCAfgBYBa5JgAOAAAWyCYADwAAFssmABAAABbQJgAQAAAXOgIB4QFSFzspjV_fEwAIFz8mABEAABfpKXrNcGAACBhhAgGsATIYuQIBhgEaGOQpbX0dWQAIGZwCAWgBCBmwJgASAAAZ6iYAEwAAGespXx-f8AAJGgsmABQAABoLJgAVAAAaDCYAFQAAGhcmABYAABoXJgAXAAAaGCYAFwAAGhkCAUoA9RoiJgAYAAAaIyYAGQAAGiQmABkAABouJgAaAAAaMCYAGwAAGjImABsAABo6JgAcAAAaOyYAHQAAGjsmAB0AABpIJgAeAAAaSSYAHwAAGkomAB8AABpYJgAgAAAaWSYAIQAAGlkmACEAABpsJgAiAAAabiYAIwAAGm8mACMAABqFJgAkAAAahyYAJQAAGogmACUAABqJAgE-AO4amyYAJgAAGp8mACcAABqgJgAnAAAaqSYAKAAAGqkmACkAABqqJgApAAAatiYAKgAAGrcmACsAABq5JgArAAA.MDojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXYgPiBkaXY6WzNdID4gZGl2ID4gZGl2ID4gZGl2ID4gcA==,MTplbi11cw==,Mjp2RTdRcQ==,MzpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,NDo3Y0hNRA==,NTpFeHBlcmllbmNlIDE=,NjojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXYgPiBkaXY6WzNdID4gZGl2ID4gZGl2ID4gZGl2ID4gcCA+IGE=,NzojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXY=,ODojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXYgPiBkaXY6WzJd,OTojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXYgPiBkaXY=.bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/telemetry HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/telemetry HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&p=0926159434424f83d4d93b49e03a5b5e2e1c2bba&v=18.13&pst=1727325558010&q=2&li=6939&lh=907&ls=0&d=ABtYAkoAAAsACgAHJgAsAAAAEAIBKADgABApTjASpQAHAGcCARUA1AC8AwEKAM4ACwC8DAAKAMEEQguczAALAMsFAQoAzgALANQCAQoAzgEGKUILnMwACwHqJgAtAAAIqCYALgAACLApwkaJSgAACNIpv3l-nwAACP0CAmUBpglhAgJOAZsJxQYCOgGRAAYJxgICOgGRCccp-hD5tQAGCioCAicBiAqQAgIUAX8KkQcCDAF7AAYKzimccAAAAAAK8QIB_QF0C1kCAfEBbgvCAgHTAWALwimIMjQ-AAcMJQIBvAFVDIICAagBSwyzKXQlrqUACAzlAgGOAT8NSgIBdwE0DboCAWcBLA26Kfi8eYAADA4SAgFIAR0OdwIBMQESDrYpTUHxXQAJDuMCAR4BCQ9CAgEHAP4PZQMBAAD7AA0PagUBAAD7AA0PbCYALwAAD6MCAQAA-xdxAgKAAbMXcSnFFJP0AAAYaynHLo6fAAAYnQICjAGwGQUCAp4BrBlQJgAwAAAZbwICswGnGXAp1vJz9AAAGc0CAsYBoxotAgLSAaAabCnmA1lKAAAanAIC5wGbGvUCAvoBlxtZAgMJAZQbWSn1FEFKAAAcFwIDEgGSHDACAyEBjhxnKf19MUoAAByjAgMnAY0c6gIDMwGKHR8GA0MBhwAOHVsCA0YBhh1cKQOHrBYADh24BgNbAYIADx28AgNbAYId3QcDYQGAAA8eGQIDagF-HkopD-d_fQAQHlYHA3cBewAOHn0CA30Beh7mAgOPAXYfRgIDpwFx.MTA6I2tpbmRseS1jaGF0LWFwaSA+IGRpdiA+IDpkb2N1bWVudC1mcmFnbWVudDogPiAjY2hhdENvbnRhaW5lciA+IGRpdiA+IGRpdiA+IGRpdiA+IGRpdjpbMl0gPiBkaXYgPiBkaXY6WzJdID4gYnV0dG9u,MTE6I2Jsb2NrLWJvb2tpbmctY29udGVudCA+IGFydGljbGUgPiBzZWN0aW9uID4gZGl2ID4gZGl2ID4gaDE=,MTI6I2Jsb2NrLWJvb2tpbmctY29udGVudCA+IGFydGljbGUgPiBzZWN0aW9uID4gZGl2ID4gZGl2ID4gZGl2OlsyXSA+IGRpdiA+IGRpdg==,MTM6I2Jsb2NrLWJvb2tpbmctY29udGVudCA+IGFydGljbGUgPiBzZWN0aW9uID4gZGl2ID4gZGl2ID4gZGl2ID4gZGl2OlsyXSA+IHNwYW4gPiBzcGFu,MTQ6I2Jsb2NrLWJvb2tpbmctY29udGVudCA+IGFydGljbGUgPiBzZWN0aW9uID4gZGl2ID4gZGl2OlsyXSA+IGRpdjpbMl0gPiBkaXYgPiB1bCA+IGxpOlszXQ==,MTU6I2J1aS1hY2NvcmRpb25fX2lkLTQzOSA+IHVsID4gbGk6WzJd,MTY6I2J1aS1hY2NvcmRpb25fX2lkLTQzOSA+IHVs. HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ariane.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&p=0926159434424f83d4d93b49e03a5b5e2e1c2bba&v=18.13&pst=1727325558010&q=2&li=6939&lh=907&ls=0&d=ABtYAkoAAAsACgAHJgAsAAAAEAIBKADgABApTjASpQAHAGcCARUA1AC8AwEKAM4ACwC8DAAKAMEEQguczAALAMsFAQoAzgALANQCAQoAzgEGKUILnMwACwHqJgAtAAAIqCYALgAACLApwkaJSgAACNIpv3l-nwAACP0CAmUBpglhAgJOAZsJxQYCOgGRAAYJxgICOgGRCccp-hD5tQAGCioCAicBiAqQAgIUAX8KkQcCDAF7AAYKzimccAAAAAAK8QIB_QF0C1kCAfEBbgvCAgHTAWALwimIMjQ-AAcMJQIBvAFVDIICAagBSwyzKXQlrqUACAzlAgGOAT8NSgIBdwE0DboCAWcBLA26Kfi8eYAADA4SAgFIAR0OdwIBMQESDrYpTUHxXQAJDuMCAR4BCQ9CAgEHAP4PZQMBAAD7AA0PagUBAAD7AA0PbCYALwAAD6MCAQAA-xdxAgKAAbMXcSnFFJP0AAAYaynHLo6fAAAYnQICjAGwGQUCAp4BrBlQJgAwAAAZbwICswGnGXAp1vJz9AAAGc0CAsYBoxotAgLSAaAabCnmA1lKAAAanAIC5wGbGvUCAvoBlxtZAgMJAZQbWSn1FEFKAAAcFwIDEgGSHDACAyEBjhxnKf19MUoAAByjAgMnAY0c6gIDMwGKHR8GA0MBhwAOHVsCA0YBhh1cKQOHrBYADh24BgNbAYIADx28AgNbAYId3QcDYQGAAA8eGQIDagF-HkopD-d_fQAQHlYHA3cBewAOHn0CA30Beh7mAgOPAXYfRgIDpwFx.MTA6I2tpbmRseS1jaGF0LWFwaSA+IGRpdiA+IDpkb2N1bWVudC1mcmFnbWVudDogPiAjY2hhdENvbnRhaW5lciA+IGRpdiA+IGRpdiA+IGRpdiA+IGRpdjpbMl0gPiBkaXYgPiBkaXY6WzJdID4gYnV0dG9u,MTE6I2Jsb2NrLWJvb2tpbmctY29udGVudCA+IGFydGljbGUgPiBzZWN0aW9uID4gZGl2ID4gZGl2ID4gaDE=,MTI6I2Jsb2NrLWJvb2tpbmctY29udGVudCA+IGFydGljbGUgPiBzZWN0aW9uID4gZGl2ID4gZGl2ID4gZGl2OlsyXSA+IGRpdiA+IGRpdg==,MTM6I2Jsb2NrLWJvb2tpbmctY29udGVudCA+IGFydGljbGUgPiBzZWN0aW9uID4gZGl2ID4gZGl2ID4gZGl2ID4gZGl2OlsyXSA+IHNwYW4gPiBzcGFu,MTQ6I2Jsb2NrLWJvb2tpbmctY29udGVudCA+IGFydGljbGUgPiBzZWN0aW9uID4gZGl2ID4gZGl2OlsyXSA+IGRpdjpbMl0gPiBkaXYgPiB1bCA+IGxpOlszXQ==,MTU6I2J1aS1hY2NvcmRpb25fX2lkLTQzOSA+IHVsID4gbGk6WzJd,MTY6I2J1aS1hY2NvcmRpb25fX2lkLTQzOSA+IHVs. HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&p=09264269a13011a279e80d7db3e808bfe44973a1&v=18.13&pst=1727325524142&q=3&li=12339&lh=907&ls=0&d=AJeMADAAAClwQ6VUAA0ABAICWgGdANcoANgqAAAAAP__AAD9AgJPAZYA_ilqZX__AA0sGxM.MTM6I3BhcmFncmFwaC10ZXh0LTIwMDAzID4gcA==.bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /*Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=dff57b6f2666f51928f3c546c03f2034&p=09264269a13011a279e80d7db3e808bfe44973a1&v=18.13&pst=1727325524142&q=3&li=12339&lh=907&ls=0&d=AJeMADAAAClwQ6VUAA0ABAICWgGdANcoANgqAAAAAP__AAD9AgJPAZYA_ilqZX__AA0sGxM.MTM6I3BhcmFncmFwaC10ZXh0LTIwMDAzID4gcA==.bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/telemetry HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/telemetry HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_468.2.dr	String found in binary or memory: buttons work using pieces of code from the individual social media providers, allowing third-party cookies to be placed on your device.</p><p>These cookies can be purely functional, but can also be used to keep track of which websites you visit from their network, to build a profile of your online browsing behavior, and to show you personalized ads. This profile will be partly built using comparable info the providers receive from your visits to other websites in their network.</p><p>To read more about what social media providers do with your personal data, take a look at their cookie and/or privacy statements: <a href="https://www.facebook.com/policies/cookies/" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>Facebook</span></a> (includes Instagram, Messenger, and Audience Network), <a href="https://www.snap.com/en-US/cookie-policy/" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>Snapchat</span></a>, <a href="https://policy.pinterest.com/en/cookies" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>Pinterest</span></a>, and <a href="https://twitter.com/en/privacy#chapter2.3" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>Twitter</span></a>. Be aware that these statements may be updated from time to time.</p></li></ul><p>We work with trusted third parties to collect data. We may occasionally share info with these third parties, such as your email address or phone number. These third parties might link your data to other info they collect to create custom audiences or deliver targeted ads. For info about how these third parties process your data, take a look at the following links: <a href="http://www.google.com/policies/privacy/partners/" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>How Google uses information</span></a>, <a href="https://www.facebook.com/policy.php" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>Facebook's data policy</span></a>.</p><h4 id="non-cookie-techniques" class="policy_font_display_one">Non-cookie techniques equals www.facebook.com (Facebook)
Source: chromecache_468.2.dr	String found in binary or memory: buttons work using pieces of code from the individual social media providers, allowing third-party cookies to be placed on your device.</p><p>These cookies can be purely functional, but can also be used to keep track of which websites you visit from their network, to build a profile of your online browsing behavior, and to show you personalized ads. This profile will be partly built using comparable info the providers receive from your visits to other websites in their network.</p><p>To read more about what social media providers do with your personal data, take a look at their cookie and/or privacy statements: <a href="https://www.facebook.com/policies/cookies/" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>Facebook</span></a> (includes Instagram, Messenger, and Audience Network), <a href="https://www.snap.com/en-US/cookie-policy/" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>Snapchat</span></a>, <a href="https://policy.pinterest.com/en/cookies" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>Pinterest</span></a>, and <a href="https://twitter.com/en/privacy#chapter2.3" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>Twitter</span></a>. Be aware that these statements may be updated from time to time.</p></li></ul><p>We work with trusted third parties to collect data. We may occasionally share info with these third parties, such as your email address or phone number. These third parties might link your data to other info they collect to create custom audiences or deliver targeted ads. For info about how these third parties process your data, take a look at the following links: <a href="http://www.google.com/policies/privacy/partners/" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>How Google uses information</span></a>, <a href="https://www.facebook.com/policy.php" target="_blank" class="a83ed08757 f88a5204c2 bui-link bui-link--primary b98133fb50"><span>Facebook's data policy</span></a>.</p><h4 id="non-cookie-techniques" class="policy_font_display_one">Non-cookie techniques equals www.twitter.com (Twitter)
Source: chromecache_531.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),la=S.length,na=0;na<la;na++)if(!u&&c(S[na],H.Ge)){fJ("https://www.youtube.com/iframe_api");u=!0;break}})}}else F(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_407.2.dr, chromecache_531.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_391.2.dr	String found in binary or memory: a.getAttribute("type")&&e.preventDefault();a.removeEventListener("beforescriptexecute",c)}))}function A(a){var c=a.src\|\|"",b=q(c);(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.removeAttribute("src"),a.setAttribute("data-src",c)))}var u=JSON.parse('[{"Tag":"https://www.google-analytics.com/analytics.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://cdn.mouseflow.com/projects/b18d32a2-ec35-41cf-9425-b945bb4c2fa5.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.youtube.com/embed/","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://try.abtasty.com/shared/analytics.47cf758c4d585426c29d.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://siteintercept.qualtrics.com/dxjsmodule/12.f83656fbc6c9f02061b2.chunk.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://lonrtp1-cdn.marketo.com/rtp-api/v1/rtp.js","CategoryId":["C0002","C0004"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.a8916e10414ef10dd8f8.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.linkedin.com/px/li_sync","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.googleoptimize.com/optimize.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.0b2b9315dfa1c7a31a02.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/shared/commons.9b20dd57c6f12e1beb80.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://px.ads.linkedin.com/collect","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.youtube.com/iframe_api","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://snap.licdn.com/li.lms-analytics/insight.min.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://lonrtp1.marketo.com/gw1/msg","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://munchkin.marketo.net/munchkin.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://connect.facebook.net/en_US/fbevents.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com/SIE/","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtag/js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://lonrtp1.marketo.com/gw1/trw","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.76ed343bc6886d987c03.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.f407b37e8979833b5efd.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://partner.booking.com/sites/default/files/js/js_2Ez4cYHRzLX9SdFBmceibdYrc28Z_eJlZxUgiIuSRws.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://cdn.evgnet.com/beacon/bookingdotcomb2b/booking_pr
Source: chromecache_391.2.dr	String found in binary or memory: a.getAttribute("type")&&e.preventDefault();a.removeEventListener("beforescriptexecute",c)}))}function A(a){var c=a.src\|\|"",b=q(c);(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.removeAttribute("src"),a.setAttribute("data-src",c)))}var u=JSON.parse('[{"Tag":"https://www.google-analytics.com/analytics.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://cdn.mouseflow.com/projects/b18d32a2-ec35-41cf-9425-b945bb4c2fa5.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.youtube.com/embed/","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://try.abtasty.com/shared/analytics.47cf758c4d585426c29d.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://siteintercept.qualtrics.com/dxjsmodule/12.f83656fbc6c9f02061b2.chunk.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://lonrtp1-cdn.marketo.com/rtp-api/v1/rtp.js","CategoryId":["C0002","C0004"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.a8916e10414ef10dd8f8.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.linkedin.com/px/li_sync","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.googleoptimize.com/optimize.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.0b2b9315dfa1c7a31a02.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/shared/commons.9b20dd57c6f12e1beb80.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://px.ads.linkedin.com/collect","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.youtube.com/iframe_api","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://snap.licdn.com/li.lms-analytics/insight.min.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://lonrtp1.marketo.com/gw1/msg","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://munchkin.marketo.net/munchkin.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://connect.facebook.net/en_US/fbevents.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com/SIE/","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtag/js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://lonrtp1.marketo.com/gw1/trw","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.76ed343bc6886d987c03.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.f407b37e8979833b5efd.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://partner.booking.com/sites/default/files/js/js_2Ez4cYHRzLX9SdFBmceibdYrc28Z_eJlZxUgiIuSRws.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://cdn.evgnet.com/beacon/bookingdotcomb2b/booking_pr
Source: chromecache_391.2.dr	String found in binary or memory: a.getAttribute("type")&&e.preventDefault();a.removeEventListener("beforescriptexecute",c)}))}function A(a){var c=a.src\|\|"",b=q(c);(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.removeAttribute("src"),a.setAttribute("data-src",c)))}var u=JSON.parse('[{"Tag":"https://www.google-analytics.com/analytics.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://cdn.mouseflow.com/projects/b18d32a2-ec35-41cf-9425-b945bb4c2fa5.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.youtube.com/embed/","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://try.abtasty.com/shared/analytics.47cf758c4d585426c29d.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://siteintercept.qualtrics.com/dxjsmodule/12.f83656fbc6c9f02061b2.chunk.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://lonrtp1-cdn.marketo.com/rtp-api/v1/rtp.js","CategoryId":["C0002","C0004"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.a8916e10414ef10dd8f8.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.linkedin.com/px/li_sync","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.googleoptimize.com/optimize.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.0b2b9315dfa1c7a31a02.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/shared/commons.9b20dd57c6f12e1beb80.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://px.ads.linkedin.com/collect","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.youtube.com/iframe_api","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://snap.licdn.com/li.lms-analytics/insight.min.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://lonrtp1.marketo.com/gw1/msg","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://munchkin.marketo.net/munchkin.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://connect.facebook.net/en_US/fbevents.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com/SIE/","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtag/js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://lonrtp1.marketo.com/gw1/trw","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.76ed343bc6886d987c03.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.f407b37e8979833b5efd.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://partner.booking.com/sites/default/files/js/js_2Ez4cYHRzLX9SdFBmceibdYrc28Z_eJlZxUgiIuSRws.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://cdn.evgnet.com/beacon/bookingdotcomb2b/booking_pr
Source: chromecache_331.2.dr, chromecache_320.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=lA(a,c,e);N(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return N(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},oA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_331.2.dr, chromecache_498.2.dr, chromecache_330.2.dr, chromecache_320.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_528.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_528.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_528.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_331.2.dr, chromecache_320.2.dr	String found in binary or memory: var SB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var k=Oz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);N(121);if(m==="https://www.facebook.com/tr/")return N(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!wy(k,yy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: check-hticompialnt520842.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: partner.booking.com
Source: global traffic	DNS traffic detected: DNS query: bstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: try.abtasty.com
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com
Source: global traffic	DNS traffic detected: DNS query: cdn.evgnet.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: chat.kindlycdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.spinnaker-js.com
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: dcinfos-cache.abtasty.com
Source: global traffic	DNS traffic detected: DNS query: account.booking.com
Source: global traffic	DNS traffic detected: DNS query: apil1.spinnaker-js.com
Source: global traffic	DNS traffic detected: DNS query: cf.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: bookingdotcomb2b.germany-2.evergage.com
Source: global traffic	DNS traffic detected: DNS query: t-cf.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: ariane.abtasty.com
Source: global traffic	DNS traffic detected: DNS query: cdn.mouseflow.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: o2.mouseflow.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: sage.kindly.ai
Source: global traffic	DNS traffic detected: DNS query: www.booking.com
Source: global traffic	DNS traffic detected: DNS query: shelves.booking.com
Source: global traffic	DNS traffic detected: DNS query: nellie.booking.com
Source: global traffic	DNS traffic detected: DNS query: d8c14d4960ca.edge.sdk.awswaf.com
Source: global traffic	DNS traffic detected: DNS query: accommodations.booking.com
Source: global traffic	DNS traffic detected: DNS query: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com
Source: global traffic	DNS traffic detected: DNS query: zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: partnerfeedback.booking.com
Source: global traffic	DNS traffic detected: DNS query: eu.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: admin.booking.com

Source: unknown

HTTP traffic detected: POST /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveContent-Length: 9sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 26 Sep 2024 04:38:15 GMTContent-Type: application/jsonContent-Length: 22Connection: closeaccess-control-allow-origin: *access-control-allow-credentials: trueCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FKZCmzwoYaoHxoMcsUb5eokIAw5T8xv%2BjKAt0cpc%2FA9NP0bWXxgH3wBwut7%2F5N54UUD8Fg7snXZsuGwCtAao%2FI6qTjJHY81Jqwk4NTWNefEW1rUctDNMAiyrQXyJCYi619F0WdcfMu4dNl5njbzd"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8c90903b4c6e8c29-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: image/gif; charset=UTF-8Transfer-Encoding: chunkedConnection: closeserver: envoydate: Thu, 26 Sep 2024 04:38:37 GMTcontent-security-policy: frame-ancestors https://.booking.com 'self'; report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=fbbc20a60d0501eb&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgePRAv4ADX7ntoy3fMddRbKNdXswhk8VnbYX9cdctzTRcontent-security-policy-report-only: base-uri 'none'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com .perimeterx.net .pxchk.net .px-cdn.net .px-client.net .px-cloud.net 'self' 'report-sample'; default-src .bstatic.com bstatic.com 'self'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss .bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com .bstatic.com bstatic.com .static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net .px-cloud.net .perimeterx.net www.gstatic.com; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=fbbc20a60d0501eb&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgePRAv4ADX7ntoy3fMddRbKNdXswhk8VnbYX9cdctzTR; script-src saa.booking.com .bstatic.com bstatic.com .static.booking.cn www.google.com www.google-analytics.com cdn.cookielaw.org geolocation.onetrust.com 'self' 'nonce-C9HX6MMge4kirwi' 'report-sample'; style-src .bstatic.com bstatic.com .static.booking.cn 'self' 'unsafe-inline'x-xss-protection: 1; mode=blockstrict-transport-security: max-age=63072000; includeSubDomains; preloadX-Cache: Error from cloudfrontVia: 1.1 999a435eb37a050d3de26fe63534c416.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA2-C2X-Amz-Cf-Id: gDYnL8yU2RKISaycsPuHdfb3R0xezcROtJU6l5_N-XH2BjN2rPagoQ==

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=1956,i,13917854189803992701,9393484012877030813,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=1956,i,13917854189803992701,9393484012877030813,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en	0%	Avira URL Cloud	safe
https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://chat.kindlycdn.com/react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420-e1a675876deb028268b2.js	0%	Avira URL Cloud	safe
https://istatic.booking.com/internal-static/capla/static/css/256aa323.b7ebf6c0.chunk.css.map	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/flags/new/48-squared/il/fc1907ccd86aa051f7fbe22649d1e31ac6aee016.p	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/css/static_cloudfront_sd.iq_ltr/e7d89fbf1d621385f416c64b2a5444ca3fb10712.css	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js	0%	Avira URL Cloud	safe
https://partner.booking.com/th	0%	Avira URL Cloud	safe
https://partner.booking.com/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3	0%	Avira URL Cloud	safe
https://partner.booking.com/en-us/community	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/flags/new/48-squared/lv/393103a26c1d5f1fbd7d9674732bbdfc42296399.p	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otCommonStyles.css	0%	Avira URL Cloud	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	URL Reputation	safe
https://cf.bstatic.com/static/img/flags/new/48-squared/kr/4cb76b458a73ca4c1de034c7623475278d363ce6.p	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/flags/new/48-squared/fi/465d3b73ff07d1d696cb5dd26fbb91097c175e1b.p	0%	Avira URL Cloud	safe
https://partner.booking.com/tr	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/css/ski_lp_overview_panel_cloudfront_sd.iq_ltr/2b3350935410fe4e36d74ef	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEB	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://www.booking.com/content/ccpa.html	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/js/searchbox_cloudfront_sd/8c409b90db8d2ce96d4f48a8b2eca3f43a705428.js	0%	Avira URL Cloud	safe
https://check-hticompialnt520842.com/api/v1/ws	0%	Avira URL Cloud	safe
https://partner.booking.com/pl/pomoc/prowizja-faktury-i-podatki/prowizja/jak-dzia%C5%82a-nasza-prowi	0%	Avira URL Cloud	safe
https://check-hticompialnt520842.com/static/stylesheets/938_afde72b9aaa8302ff017.css	0%	Avira URL Cloud	safe
https://cf.bstatic.com/psb/accountsportal/assets/57_7bdf6faf45bc50479844.css	0%	Avira URL Cloud	safe
http://www.boldmonday.comhttp://www.ibm.comThis	0%	Avira URL Cloud	safe
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page&rl=&if=false&ts=1727325527582&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325523806&coo=false&rqm=FGET	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/announcements%404x.png.webp?itok=KL33QV-E	0%	Avira URL Cloud	safe
https://cf.bstatic.com/psb/capla/static/js/client.cdce4d89.js	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/flags/new/48-squared/se/5e126775c25a54a24956ddcc72c8bbcaeed20872.p	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/js/assistant_entrypoint_cloudfront_sd/ef4280b820a27ed734dd50de76d082ea	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/flags/new/48-squared/cz/32002e60fead55ce886ff9827dfcf4af8cf4e277.p	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/flags/new/48-squared/bg/540f2da5fee31b7385af127619ab5ca4fc3783b5.p	0%	Avira URL Cloud	safe
https://partner.booking.com/sr	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt	0%	Avira URL Cloud	safe
https://partner.booking.com/node/2170?utm_source=account&utm_medium=support_link	0%	Avira URL Cloud	safe
https://bookingdotcomb2b.germany-2.evergage.com/pr?.top=1558&action=Viewed%20Homepage&.tt=1291&.ttdns=10&.dt=5103&.lt=6664&.btdns=21&.bv=16&_ak=bookingdotcomb2b&_ds=booking_prod&.scv=209&channel=Web&_r=992097&.anonId=b4e22603e724eee2&_anon=true	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/flags/new/48-squared/gr/e0e42a97a7b860fc9be71954262902f2a4e94aa6.p	0%	Avira URL Cloud	safe
https://cf.bstatic.com/libs/promise/7.0.4/promise-7.0.4.min.js	0%	Avira URL Cloud	safe
https://www.booking.com/hostels/index.html?label=gen173bo-1FCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZ	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/css/css_FRnVN-AoCmyVf7GM2IgM4mFbNtWA10a48WIBmHpcfz4.css?delta=0&language=en-us&theme=booking&include=eJxdjlsOwzAIBC_kxEeKsI0SGmJcA2lz-1ZV3z9Is6vRoocabjGBYkgiK9U5Jqchq_7zYB12ZMY-MM2LDbbg9rFmlgQc8GpMdY2lewMenxgYDnGbCmmWHfsRpWIWDg06zB3aoi_jk4xemycmXbCEnfCi8XHHTYozhiwdXxac4Pp-RZny-lOXLi25mdRwOvt9f3KawE2ybI3RMH7DDWAkbHg	0%	Avira URL Cloud	safe
https://partner.booking.com/sv	0%	Avira URL Cloud	safe
https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.f9f9128fc0ece542a425.js	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.ar.html	0%	Avira URL Cloud	safe
https://o2.mouseflow.com/data	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/flags/new/48-squared/rs/c1bc4fc1d782713cfec17a071dadca6b755a233e.p	0%	Avira URL Cloud	safe
https://connect.facebook.net/signals/config/	0%	Avira URL Cloud	safe
https://lonrtp1-cdn.marketo.com/rtp-api/v1/rtp.js	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845e	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/js/js_XTjBQJ6d5GjQBWtE1eAYYfeF4N--4VXtN-4p8onNEKI.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJx1UQFuwyAM_FBYnjQdxE1oiI2MaZu9fqRrE7XbJGTpuLPvDAMMCStp72nCJYqWLuFr7bfSeZE58tiPSTzSDn2N7lx2GETCHCmruJOEWtwEHhLpoUeYnUk7uaObpchzP2jNSB8P2BWDxWIxlCdz3BwxbHHB4EKKbeC7y8auUq16ctbmOlo8DW_iS6Rr6e_1A2fcjiWgKrVQar0opC5DMSry9GLgwdzI_xM8BJvDL_7wCMJGbH-YTISh9ReChqkLovR8kEEl-2omvItPCaPbwAKdHZK1TrDwujSbXVW3dUocOXL7AkkW80vkBY1YiOvbWu0xr_T5k6S_g0esb2XR2aU	0%	Avira URL Cloud	safe
https://siteintercept.qualtrics.com	0%	Avira URL Cloud	safe
https://bstatic.com/libs/bui/9.5.6/bui.min.js	0%	Avira URL Cloud	safe
https://www.booking.com/covid-19-booking-faqs.html?label=gen173bo-1FCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEB	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/flags/new/48-squared/id/e7d3d00965d8c994a72807b43b21c648250cf906.p	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json	0%	Avira URL Cloud	safe
https://partner.booking.com/ro	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fhelp%2Fsupport-contact%2Fcontact%2Fwhere-you-can-reach-us%3Futm_source%3Daccount%26utm_medium%3Dsupport_link&rl=&if=false&ts=1727325556396&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325554479&coo=false&rqm=GET	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.hr.html	0%	Avira URL Cloud	safe
https://partner.booking.com/ru	0%	Avira URL Cloud	safe
https://partner.booking.com/core/modules/statistics/statistics.php	0%	Avira URL Cloud	safe
https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/manifest.json	0%	Avira URL Cloud	safe
https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us	0%	Avira URL Cloud	safe
https://cf.bstatic.com/psb/capla/static/js/a72063b1.a2509705.chunk.js	0%	Avira URL Cloud	safe
https://chat.kindlycdn.com/kindly-chat.js	0%	Avira URL Cloud	safe
https://account.booking.com/sso/logout/v3	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/avatar_default/public/2024-08/jordane_id_hec.	0%	Avira URL Cloud	safe
https://t-cf.bstatic.com/design-assets/assets/v3.109.6/fonts-brand/BookingBold.woff	0%	Avira URL Cloud	safe
https://istatic.booking.com/internal-static/capla/static/css/client.8f9edc6d.css.map	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.it.html	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d	0%	Avira URL Cloud	safe
https://lonrtp1.marketo.com/gw1/trw	0%	Avira URL Cloud	safe
https://ariane.abtasty.com/	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.es.html	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/hospitality%404x.png.webp?itok=CnzaJ3-K	0%	Avira URL Cloud	safe
https://cf.bstatic.com/psb/capla/	0%	Avira URL Cloud	safe
https://secure.booking.com	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/favicon/4a3b40c4059be39cbf1ebaa5f97dbb7d150926b9.png	0%	Avira URL Cloud	safe
https://partner.booking.com/libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/huge_slider_teaser/public/2024-05/gettyimages-1463514567.jpg.webp?h=7bb33798&itok=WPHXrhlG	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.fr.html	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.tr.html	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/js/sp-on-maps_cloudfront_sd/1d69e13e40d03fc59f58d76b31735d5d8c37416a.j	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.lt.html	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.p	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.sl.html	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/0191ffb2-0224-7614-89a9-ce4becc49775/en-us.json	0%	Avira URL Cloud	safe
https://cf.bstatic.com/static/js/async_atlas_v2_non_cn_cloudfront_sd/880672823d34a6cc1366fd38f98c6b4	0%	Avira URL Cloud	safe
https://partner.booking.com/es-ar	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.cs.html	0%	Avira URL Cloud	safe
https://t-cf.bstatic.com/design-assets/assets/v3.109.6/fonts-brand/BookingRegular.woff	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/js/js_QImxwfPMAJCQdpMj3YFNMdrqCslQk6o0saCwVvpNQgk.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxdUAGOgzAM-xA5njSlJaM92qZKU7jd6y-wG2iTEJLt2Ek9oWLCB8noKOAaWdqQ8Pcx7r_BMS-xzOOc2GE6oesRvtsJPbNfIlVhuLPvDQKWKZFc8-gXULavDvSjKZZlnKRXTF__cGiKGptG317KxVxnaAavCD5FC_zcsqsP7todgVouUHY0fQyvkbZ2i-UeS1S6NS-c0niw8GLhyQ6CSmMvKxsVKFWzH9QGGnp2rddzN3rPMkUuoOgsKVsZK2Uq2t5a2_PBc65c3rQWeANMV8UeRbg3SvYUbCRQUXAWrGGwTfQqaRKurqtyOZ33hDPsIKMslqlmxsLlkS3vnOp7ZotziXYyc9JY34rMaILd3z_6s4I3q41QfBgPAE9wugPhtGcf7B_cGurl	0%	Avira URL Cloud	safe
https://accommodations.booking.com/performance/v1/report	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
d2i5gg36g14bzn.cloudfront.net	18.245.31.53	true	false	unknown
bstatic.com	18.245.31.53	true	false	unknown
cdn.evgnet.com	151.101.64.114	true	false	unknown
chat.kindlycdn.com	104.26.7.229	true	false	unknown
bookingdotcomb2b.germany-2.evergage.com	52.58.5.54	true	false	unknown
d2uxzmvxe6bz7q.cloudfront.net	13.33.187.52	true	false	unknown
ariane.abtasty.com	34.36.178.232	true	false	unknown
sage.kindly.ai	34.120.99.165	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
d8c14d4960ca.edge.sdk.awswaf.com	18.245.31.106	true	false	unknown
stats.g.doubleclick.net	74.125.206.157	true	false	unknown
check-hticompialnt520842.com	172.67.156.33	true	true	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
code.jquery.com	151.101.130.137	true	false	unknown
d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	18.244.18.10	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
d2df291ti5v5sq.cloudfront.net	18.66.112.20	true	false	unknown
d2tnkvy3u7j3cp.cloudfront.net	13.32.27.88	true	false	unknown
pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com	52.208.5.246	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
du1b3vb35hc0o.cloudfront.net	13.225.78.90	true	false	unknown
d1of1hbywxxm65.cloudfront.net	18.245.60.76	true	false	unknown
partner.booking.com	18.66.147.32	true	false	unknown
www.googleoptimize.com	142.250.184.206	true	false	unknown
de2trjlt8e8rj.cloudfront.net	52.222.236.65	true	false	unknown
o2.mouseflow.com	185.17.186.161	true	false	unknown
analytics.google.com	172.217.18.14	true	false	unknown
td.doubleclick.net	216.58.206.34	true	false	unknown
dcinfos-cache.abtasty.com	34.36.178.232	true	false	unknown
cdn.cookielaw.org	104.18.86.42	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
try-cloudfront.abtasty.com	18.172.112.72	true	false	unknown
siteintercept.qualtrics.com	unknown	unknown	false	unknown
admin.booking.com	unknown	unknown	false	unknown
try.abtasty.com	unknown	unknown	false	unknown
zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	unknown	unknown	false	unknown
zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	unknown	unknown	false	unknown
accommodations.booking.com	unknown	unknown	false	unknown
cf.bstatic.com	unknown	unknown	false	unknown
apil1.spinnaker-js.com	unknown	unknown	false	unknown
cdn.spinnaker-js.com	unknown	unknown	false	unknown
partnerfeedback.booking.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
cdn.mouseflow.com	unknown	unknown	false	unknown
t-cf.bstatic.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
nellie.booking.com	unknown	unknown	false	unknown
eu.qualtrics.com	unknown	unknown	false	unknown
www.booking.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
account.booking.com	unknown	unknown	false	unknown
shelves.booking.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://chat.kindlycdn.com/react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420-e1a675876deb028268b2.js	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/css/static_cloudfront_sd.iq_ltr/e7d89fbf1d621385f416c64b2a5444ca3fb10712.css	false	Avira URL Cloud: safe	unknown
https://account.booking.com/account-recovery/options?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y	false		unknown
https://cf.bstatic.com/static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otCommonStyles.css	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_link	false		unknown
https://cf.bstatic.com/static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/js/searchbox_cloudfront_sd/8c409b90db8d2ce96d4f48a8b2eca3f43a705428.js	false	Avira URL Cloud: safe	unknown
https://check-hticompialnt520842.com/api/v1/ws	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fcommunity%3Futm_content%3D27%26utm_source%3Dextranet_login_page&rl=&if=false&ts=1727325527582&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325523806&coo=false&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/psb/accountsportal/assets/57_7bdf6faf45bc50479844.css	false	Avira URL Cloud: safe	unknown
https://check-hticompialnt520842.com/static/stylesheets/938_afde72b9aaa8302ff017.css	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/announcements%404x.png.webp?itok=KL33QV-E	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/psb/capla/static/js/client.cdce4d89.js	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt	false	Avira URL Cloud: safe	unknown
https://bookingdotcomb2b.germany-2.evergage.com/pr?.top=1558&action=Viewed%20Homepage&.tt=1291&.ttdns=10&.dt=5103&.lt=6664&.btdns=21&.bv=16&_ak=bookingdotcomb2b&_ds=booking_prod&.scv=209&channel=Web&_r=992097&.anonId=b4e22603e724eee2&_anon=true	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/css/css_FRnVN-AoCmyVf7GM2IgM4mFbNtWA10a48WIBmHpcfz4.css?delta=0&language=en-us&theme=booking&include=eJxdjlsOwzAIBC_kxEeKsI0SGmJcA2lz-1ZV3z9Is6vRoocabjGBYkgiK9U5Jqchq_7zYB12ZMY-MM2LDbbg9rFmlgQc8GpMdY2lewMenxgYDnGbCmmWHfsRpWIWDg06zB3aoi_jk4xemycmXbCEnfCi8XHHTYozhiwdXxac4Pp-RZny-lOXLi25mdRwOvt9f3KawE2ybI3RMH7DDWAkbHg	false	Avira URL Cloud: safe	unknown
https://o2.mouseflow.com/data	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/js/js_XTjBQJ6d5GjQBWtE1eAYYfeF4N--4VXtN-4p8onNEKI.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJx1UQFuwyAM_FBYnjQdxE1oiI2MaZu9fqRrE7XbJGTpuLPvDAMMCStp72nCJYqWLuFr7bfSeZE58tiPSTzSDn2N7lx2GETCHCmruJOEWtwEHhLpoUeYnUk7uaObpchzP2jNSB8P2BWDxWIxlCdz3BwxbHHB4EKKbeC7y8auUq16ctbmOlo8DW_iS6Rr6e_1A2fcjiWgKrVQar0opC5DMSry9GLgwdzI_xM8BJvDL_7wCMJGbH-YTISh9ReChqkLovR8kEEl-2omvItPCaPbwAKdHZK1TrDwujSbXVW3dUocOXL7AkkW80vkBY1YiOvbWu0xr_T5k6S_g0esb2XR2aU	false	Avira URL Cloud: safe	unknown
https://bstatic.com/libs/bui/9.5.6/bui.min.js	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fhelp%2Fsupport-contact%2Fcontact%2Fwhere-you-can-reach-us%3Futm_source%3Daccount%26utm_medium%3Dsupport_link&rl=&if=false&ts=1727325556396&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727325527576.891978143610399285&cs_est=true&ler=empty&cdl=API_unavailable&it=1727325554479&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/manifest.json	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/core/modules/statistics/statistics.php	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/psb/capla/static/js/a72063b1.a2509705.chunk.js	false	Avira URL Cloud: safe	unknown
https://chat.kindlycdn.com/kindly-chat.js	false	Avira URL Cloud: safe	unknown
https://t-cf.bstatic.com/design-assets/assets/v3.109.6/fonts-brand/BookingBold.woff	false	Avira URL Cloud: safe	unknown
https://ariane.abtasty.com/	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/hospitality%404x.png.webp?itok=CnzaJ3-K	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://partner.booking.com/libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.html?label=gen173bo-1BCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AEB6AEBiAIBmAIhqAIDuAKC4pmxBsACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBeACAQ&sid=e07102229068cd1d162244dd890d4359&keep_landing=1&	false		unknown
https://partner.booking.com/sites/default/files/styles/huge_slider_teaser/public/2024-05/gettyimages-1463514567.jpg.webp?h=7bb33798&itok=WPHXrhlG	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/0191ffb2-0224-7614-89a9-ce4becc49775/en-us.json	false	Avira URL Cloud: safe	unknown
https://t-cf.bstatic.com/design-assets/assets/v3.109.6/fonts-brand/BookingRegular.woff	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/js/js_QImxwfPMAJCQdpMj3YFNMdrqCslQk6o0saCwVvpNQgk.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxdUAGOgzAM-xA5njSlJaM92qZKU7jd6y-wG2iTEJLt2Ek9oWLCB8noKOAaWdqQ8Pcx7r_BMS-xzOOc2GE6oesRvtsJPbNfIlVhuLPvDQKWKZFc8-gXULavDvSjKZZlnKRXTF__cGiKGptG317KxVxnaAavCD5FC_zcsqsP7todgVouUHY0fQyvkbZ2i-UeS1S6NS-c0niw8GLhyQ6CSmMvKxsVKFWzH9QGGnp2rddzN3rPMkUuoOgsKVsZK2Uq2t5a2_PBc65c3rQWeANMV8UeRbg3SvYUbCRQUXAWrGGwTfQqaRKurqtyOZ33hDPsIKMslqlmxsLlkS3vnOp7ZotziXYyc9JY34rMaILd3z_6s4I3q41QfBgPAE9wugPhtGcf7B_cGurl	false	Avira URL Cloud: safe	unknown
https://accommodations.booking.com/performance/v1/report	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://cf.bstatic.com/static/img/flags/new/48-squared/il/fc1907ccd86aa051f7fbe22649d1e31ac6aee016.p	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://istatic.booking.com/internal-static/capla/static/css/256aa323.b7ebf6c0.chunk.css.map	chromecache_517.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/en-us/community	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/flags/new/48-squared/lv/393103a26c1d5f1fbd7d9674732bbdfc42296399.p	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/th	chromecache_477.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/flags/new/48-squared/kr/4cb76b458a73ca4c1de034c7623475278d363ce6.p	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/flags/new/48-squared/fi/465d3b73ff07d1d696cb5dd26fbb91097c175e1b.p	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_375.2.dr, chromecache_511.2.dr	false	URL Reputation: safe	unknown
https://partner.booking.com/tr	chromecache_477.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/ccpa.html	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/css/ski_lp_overview_panel_cloudfront_sd.iq_ltr/2b3350935410fe4e36d74ef	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEB	chromecache_374.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/pl/pomoc/prowizja-faktury-i-podatki/prowizja/jak-dzia%C5%82a-nasza-prowi	chromecache_248.2.dr, chromecache_419.2.dr	false	Avira URL Cloud: safe	unknown
http://www.boldmonday.comhttp://www.ibm.comThis	chromecache_395.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/flags/new/48-squared/se/5e126775c25a54a24956ddcc72c8bbcaeed20872.p	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/js/assistant_entrypoint_cloudfront_sd/ef4280b820a27ed734dd50de76d082ea	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/flags/new/48-squared/cz/32002e60fead55ce886ff9827dfcf4af8cf4e277.p	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/flags/new/48-squared/bg/540f2da5fee31b7385af127619ab5ca4fc3783b5.p	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/node/2170?utm_source=account&utm_medium=support_link	chromecache_374.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/libs/promise/7.0.4/promise-7.0.4.min.js	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sr	chromecache_477.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/flags/new/48-squared/gr/e0e42a97a7b860fc9be71954262902f2a4e94aa6.p	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/hostels/index.html?label=gen173bo-1FCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZ	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sv	chromecache_477.2.dr	false	Avira URL Cloud: safe	unknown
https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.f9f9128fc0ece542a425.js	chromecache_296.2.dr, chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/flags/new/48-squared/rs/c1bc4fc1d782713cfec17a071dadca6b755a233e.p	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.ar.html	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/signals/config/	chromecache_296.2.dr, chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845e	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://lonrtp1-cdn.marketo.com/rtp-api/v1/rtp.js	chromecache_296.2.dr, chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
https://siteintercept.qualtrics.com	chromecache_334.2.dr, chromecache_289.2.dr, chromecache_508.2.dr, chromecache_424.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/covid-19-booking-faqs.html?label=gen173bo-1FCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEB	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/flags/new/48-squared/id/e7d3d00965d8c994a72807b43b21c648250cf906.p	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/ro	chromecache_477.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.hr.html	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/ru	chromecache_477.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us	chromecache_502.2.dr	false	Avira URL Cloud: safe	unknown
https://account.booking.com/sso/logout/v3	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_259.2.dr, chromecache_279.2.dr	false	URL Reputation: safe	unknown
https://partner.booking.com/sites/default/files/styles/avatar_default/public/2024-08/jordane_id_hec.	chromecache_477.2.dr	false	Avira URL Cloud: safe	unknown
https://istatic.booking.com/internal-static/capla/static/css/client.8f9edc6d.css.map	chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.it.html	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://lonrtp1.marketo.com/gw1/trw	chromecache_296.2.dr, chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt	chromecache_487.2.dr, chromecache_413.2.dr, chromecache_448.2.dr, chromecache_251.2.dr, chromecache_452.2.dr, chromecache_429.2.dr, chromecache_361.2.dr, chromecache_471.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.es.html	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/psb/capla/	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://secure.booking.com	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/favicon/4a3b40c4059be39cbf1ebaa5f97dbb7d150926b9.png	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.tr.html	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.fr.html	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/js/sp-on-maps_cloudfront_sd/1d69e13e40d03fc59f58d76b31735d5d8c37416a.j	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt	chromecache_487.2.dr, chromecache_413.2.dr, chromecache_448.2.dr, chromecache_429.2.dr, chromecache_361.2.dr, chromecache_471.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.lt.html	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.p	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.sl.html	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.cs.html	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/js/async_atlas_v2_non_cn_cloudfront_sd/880672823d34a6cc1366fd38f98c6b4	chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/es-ar	chromecache_477.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
185.17.186.161	o2.mouseflow.com	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
185.17.186.162	unknown	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
13.225.78.20	unknown	United States	16509	AMAZON-02US	false
18.66.112.15	unknown	United States	3	MIT-GATEWAYSUS	false
172.67.156.33	check-hticompialnt520842.com	United States	13335	CLOUDFLARENETUS	true
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
52.222.236.65	de2trjlt8e8rj.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
18.66.147.79	unknown	United States	3	MIT-GATEWAYSUS	false
18.66.147.32	partner.booking.com	United States	3	MIT-GATEWAYSUS	false
18.245.60.76	d1of1hbywxxm65.cloudfront.net	United States	16509	AMAZON-02US	false
142.251.173.154	unknown	United States	15169	GOOGLEUS	false
52.208.5.246	pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com	United States	16509	AMAZON-02US	false
18.172.112.27	unknown	United States	3	MIT-GATEWAYSUS	false
104.18.87.42	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.56.222	unknown	United States	13335	CLOUDFLARENETUS	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.33.187.52	d2uxzmvxe6bz7q.cloudfront.net	United States	16509	AMAZON-02US	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
18.245.31.106	d8c14d4960ca.edge.sdk.awswaf.com	United States	16509	AMAZON-02US	false
151.101.64.114	cdn.evgnet.com	United States	54113	FASTLYUS	false
104.26.6.229	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.18.14	analytics.google.com	United States	15169	GOOGLEUS	false
216.58.206.34	td.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.0.114	unknown	United States	54113	FASTLYUS	false
18.172.112.72	try-cloudfront.abtasty.com	United States	3	MIT-GATEWAYSUS	false
104.26.7.229	chat.kindlycdn.com	United States	13335	CLOUDFLARENETUS	false
18.245.31.53	d2i5gg36g14bzn.cloudfront.net	United States	16509	AMAZON-02US	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
74.125.206.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.245.31.18	unknown	United States	16509	AMAZON-02US	false
13.225.78.90	du1b3vb35hc0o.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.184.206	www.googleoptimize.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
34.120.99.165	sage.kindly.ai	United States	15169	GOOGLEUS	false
18.244.18.10	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	United States	16509	AMAZON-02US	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
18.66.112.20	d2df291ti5v5sq.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
18.244.18.18	unknown	United States	16509	AMAZON-02US	false
52.58.5.54	bookingdotcomb2b.germany-2.evergage.com	United States	16509	AMAZON-02US	false
34.36.178.232	ariane.abtasty.com	United States	2686	ATGS-MMD-ASUS	false
52.222.236.77	unknown	United States	16509	AMAZON-02US	false
18.245.31.129	unknown	United States	16509	AMAZON-02US	false
104.18.86.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false

IP
192.168.2.4
192.168.2.6

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1519081
Start date and time:	2024-09-26 06:37:14 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@23/503@160/47
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://partner.booking.com/en-us?utm_source=extranet_login_page Browse: https://account.booking.com/register?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y Browse: https://partner.booking.com/en-us/node/27/?utm_content=27&utm_source=extranet_login_page Browse: https://account.booking.com/account-recovery/options?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y Browse: https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxBsACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ&sid=930746e7f78d5b33410375991db31657 Browse: https://partner.booking.com/node/2170?utm_source=account&utm_medium=support_link

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2146
Entropy (8bit):	7.8875883951747925
Encrypted:	false
SSDEEP:	48:j/6u3CtuLhUGh0H5UFe2pYo37Esd2gjEj7seiEfE/ODAtLx:jSRuLKA0ZUFnR4sPEUeJf8/
MD5:	27E71A5124018E16EAE0B8897618623D
SHA1:	D0D54D88B04EDFC71F338C19EAB9994632BC6CED
SHA-256:	1D6E86E59AB7235A8343F494C8E8DA6CC02C5A98A75D682401340E6D06935F20
SHA-512:	A9D6F6B881175780E2619843AA88AACE7E94DA178C53C3DDDE691A930C5412FC4CD817009D488757835903D9218758F808AC36C1F828371D57AF91EA9CF3170A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...F..........b.....pHYs.................sRGB.........gAMA......a.....IDATx..Y.pT..>...........e....f.+(T.L..KiZ.....`..c;v .....u.M...h.........DJ..RQ..-?!FlB.}..~w./........3s..}..s.{...et.Kyy.....;v.....N..p.....I4=...t..'.BI.,/X..R.0.%.<.....F...i.6..rSJ.......Mgy0x.#.:....YYY....}.....~..L..M...........d.`..t...>Gi.K......)W.x.i?.5H.........Q...-0z..8 ?..IR.G`..N..`p...Q<.t.i2..~)K.G..l\y(4E..y.31.7.(....Wa..>......_RR....6.-..7...Iy..y;......~.<..T....)k.e...D.f...........2.k..0.=.[..D..n...W..V.B..uVUU..."5m.0W._.0a..^.'...V8x.. e.I...H8..... ..N;....".&.J...Hd.l).81....5.c...<.....W.o....U/(..,.O..+.c.ZZZ........L..c...V..[...... .g(.Y..P....>.>.-v?....>..&.?j.A....)5Q...KO....'.l..G...:.b{..#..4.`.[.]..V..20.k.-W.<.m[.q.BA.i........!...,.6.....N...l2.......`......1...o^...iY.]...&.O....\.c.>L.w...:.......u..d9.f.Ld.*....J...=...1....A.!&.c......f.}s....,."..e.....2....)...%..o..I\."_JL..id..c.N.y...k...p.m..A...

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 26, 2024 06:38:10.604469061 CEST	192.168.2.6	1.1.1.1	0x3bb	Standard query (0)	check-hticompialnt520842.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:10.604648113 CEST	192.168.2.6	1.1.1.1	0x56c4	Standard query (0)	check-hticompialnt520842.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:12.228049040 CEST	192.168.2.6	1.1.1.1	0x9ee3	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:12.228549957 CEST	192.168.2.6	1.1.1.1	0x4aa3	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:12.269953012 CEST	192.168.2.6	1.1.1.1	0x514	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:12.270375013 CEST	192.168.2.6	1.1.1.1	0x336e	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:13.161184072 CEST	192.168.2.6	1.1.1.1	0x7dec	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:13.165220976 CEST	192.168.2.6	1.1.1.1	0xf5b1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:14.948772907 CEST	192.168.2.6	1.1.1.1	0xf8b4	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:14.948925972 CEST	192.168.2.6	1.1.1.1	0x4ae6	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:14.951833010 CEST	192.168.2.6	1.1.1.1	0x84e1	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:14.952200890 CEST	192.168.2.6	1.1.1.1	0x7055	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:14.966473103 CEST	192.168.2.6	1.1.1.1	0x1945	Standard query (0)	check-hticompialnt520842.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:14.966938972 CEST	192.168.2.6	1.1.1.1	0x9324	Standard query (0)	check-hticompialnt520842.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:23.165617943 CEST	192.168.2.6	1.1.1.1	0xc50b	Standard query (0)	partner.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:23.165875912 CEST	192.168.2.6	1.1.1.1	0xafff	Standard query (0)	partner.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:25.157737970 CEST	192.168.2.6	1.1.1.1	0x18e	Standard query (0)	bstatic.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:25.158116102 CEST	192.168.2.6	1.1.1.1	0xade9	Standard query (0)	bstatic.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:25.158929110 CEST	192.168.2.6	1.1.1.1	0x613e	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:25.159461975 CEST	192.168.2.6	1.1.1.1	0x8138	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Sep 26, 2024 06:38:25.171679020 CEST	192.168.2.6	1.1.1.1	0x47a9	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:25.172166109 CEST	192.168.2.6	1.1.1.1	0x707b	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Sep 26, 2024 06:38:25.175462008 CEST	192.168.2.6	1.1.1.1	0xc185	Standard query (0)	try.abtasty.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:25.175620079 CEST	192.168.2.6	1.1.1.1	0xce0e	Standard query (0)	try.abtasty.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:25.206302881 CEST	192.168.2.6	1.1.1.1	0x5009	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:25.207139969 CEST	192.168.2.6	1.1.1.1	0x3e0e	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:25.221656084 CEST	192.168.2.6	1.1.1.1	0x3495	Standard query (0)	cdn.evgnet.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:25.221848965 CEST	192.168.2.6	1.1.1.1	0xcb9a	Standard query (0)	cdn.evgnet.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:27.141072989 CEST	192.168.2.6	1.1.1.1	0xebf3	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:27.141355991 CEST	192.168.2.6	1.1.1.1	0x190e	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Sep 26, 2024 06:38:27.765974998 CEST	192.168.2.6	1.1.1.1	0xfaf3	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:27.766202927 CEST	192.168.2.6	1.1.1.1	0x48af	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:27.805536985 CEST	192.168.2.6	1.1.1.1	0xee23	Standard query (0)	cdn.evgnet.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:27.806667089 CEST	192.168.2.6	1.1.1.1	0x1c1a	Standard query (0)	cdn.evgnet.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:27.817771912 CEST	192.168.2.6	1.1.1.1	0x8811	Standard query (0)	partner.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:27.818048954 CEST	192.168.2.6	1.1.1.1	0xf53a	Standard query (0)	partner.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:27.821096897 CEST	192.168.2.6	1.1.1.1	0xd74d	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:27.821594000 CEST	192.168.2.6	1.1.1.1	0xa7e4	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:27.975927114 CEST	192.168.2.6	1.1.1.1	0x5b02	Standard query (0)	try.abtasty.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:27.976080894 CEST	192.168.2.6	1.1.1.1	0xd8b1	Standard query (0)	try.abtasty.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:28.565927029 CEST	192.168.2.6	1.1.1.1	0xc55b	Standard query (0)	bstatic.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:28.566334963 CEST	192.168.2.6	1.1.1.1	0x9652	Standard query (0)	bstatic.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:28.574791908 CEST	192.168.2.6	1.1.1.1	0x64fe	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:28.575448990 CEST	192.168.2.6	1.1.1.1	0x433d	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:29.888717890 CEST	192.168.2.6	1.1.1.1	0x5c0b	Standard query (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:29.888952971 CEST	192.168.2.6	1.1.1.1	0x2314	Standard query (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:29.889714956 CEST	192.168.2.6	1.1.1.1	0x728f	Standard query (0)	chat.kindlycdn.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:29.889873981 CEST	192.168.2.6	1.1.1.1	0x6826	Standard query (0)	chat.kindlycdn.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:29.890676022 CEST	192.168.2.6	1.1.1.1	0xda2a	Standard query (0)	cdn.spinnaker-js.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:29.891048908 CEST	192.168.2.6	1.1.1.1	0xc282	Standard query (0)	cdn.spinnaker-js.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:30.738325119 CEST	192.168.2.6	1.1.1.1	0x4476	Standard query (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:30.738493919 CEST	192.168.2.6	1.1.1.1	0x8282	Standard query (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:30.935798883 CEST	192.168.2.6	1.1.1.1	0x3260	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:30.935966969 CEST	192.168.2.6	1.1.1.1	0x1e9e	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:31.008352041 CEST	192.168.2.6	1.1.1.1	0x1ed5	Standard query (0)	chat.kindlycdn.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:31.008568048 CEST	192.168.2.6	1.1.1.1	0xb2e2	Standard query (0)	chat.kindlycdn.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:31.688095093 CEST	192.168.2.6	1.1.1.1	0x3bd6	Standard query (0)	cdn.spinnaker-js.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:31.688446045 CEST	192.168.2.6	1.1.1.1	0x2d1b	Standard query (0)	cdn.spinnaker-js.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:31.806272984 CEST	192.168.2.6	1.1.1.1	0xcb33	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:31.806616068 CEST	192.168.2.6	1.1.1.1	0xd041	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:32.691890955 CEST	192.168.2.6	1.1.1.1	0x821a	Standard query (0)	dcinfos-cache.abtasty.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:32.692089081 CEST	192.168.2.6	1.1.1.1	0x85c8	Standard query (0)	dcinfos-cache.abtasty.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:32.955329895 CEST	192.168.2.6	1.1.1.1	0x15f	Standard query (0)	account.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:32.955724955 CEST	192.168.2.6	1.1.1.1	0x84d2	Standard query (0)	account.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:33.516606092 CEST	192.168.2.6	1.1.1.1	0xedf6	Standard query (0)	dcinfos-cache.abtasty.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:33.516863108 CEST	192.168.2.6	1.1.1.1	0xba5	Standard query (0)	dcinfos-cache.abtasty.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:33.925276041 CEST	192.168.2.6	1.1.1.1	0x1b5d	Standard query (0)	apil1.spinnaker-js.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:33.925451040 CEST	192.168.2.6	1.1.1.1	0x3273	Standard query (0)	apil1.spinnaker-js.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:34.147504091 CEST	192.168.2.6	1.1.1.1	0xb28d	Standard query (0)	cf.bstatic.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:34.147910118 CEST	192.168.2.6	1.1.1.1	0xaa0b	Standard query (0)	cf.bstatic.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:34.378318071 CEST	192.168.2.6	1.1.1.1	0x2255	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:34.378501892 CEST	192.168.2.6	1.1.1.1	0x8d92	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:35.026259899 CEST	192.168.2.6	1.1.1.1	0x524	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:35.026787043 CEST	192.168.2.6	1.1.1.1	0xed00	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Sep 26, 2024 06:38:35.586182117 CEST	192.168.2.6	1.1.1.1	0x2edf	Standard query (0)	t-cf.bstatic.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:35.586343050 CEST	192.168.2.6	1.1.1.1	0xc232	Standard query (0)	t-cf.bstatic.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:35.671025038 CEST	192.168.2.6	1.1.1.1	0x6ec4	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:35.671437979 CEST	192.168.2.6	1.1.1.1	0x944c	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:36.368171930 CEST	192.168.2.6	1.1.1.1	0xd1be	Standard query (0)	ariane.abtasty.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:36.368407011 CEST	192.168.2.6	1.1.1.1	0xda95	Standard query (0)	ariane.abtasty.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:37.022741079 CEST	192.168.2.6	1.1.1.1	0x4be1	Standard query (0)	ariane.abtasty.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:37.022891045 CEST	192.168.2.6	1.1.1.1	0xf1fb	Standard query (0)	ariane.abtasty.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:41.930962086 CEST	192.168.2.6	1.1.1.1	0xcca0	Standard query (0)	cdn.mouseflow.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:41.931154013 CEST	192.168.2.6	1.1.1.1	0xe604	Standard query (0)	cdn.mouseflow.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:43.061178923 CEST	192.168.2.6	1.1.1.1	0xa98f	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:43.061775923 CEST	192.168.2.6	1.1.1.1	0xae96	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:43.062515020 CEST	192.168.2.6	1.1.1.1	0xf595	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:43.062634945 CEST	192.168.2.6	1.1.1.1	0xd3af	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 26, 2024 06:38:43.173410892 CEST	192.168.2.6	1.1.1.1	0xa75c	Standard query (0)	cdn.mouseflow.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:43.173646927 CEST	192.168.2.6	1.1.1.1	0x5b02	Standard query (0)	cdn.mouseflow.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:43.295905113 CEST	192.168.2.6	1.1.1.1	0x40c4	Standard query (0)	o2.mouseflow.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:43.296050072 CEST	192.168.2.6	1.1.1.1	0xd5b0	Standard query (0)	o2.mouseflow.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:43.462492943 CEST	192.168.2.6	1.1.1.1	0x9185	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:43.462714911 CEST	192.168.2.6	1.1.1.1	0x5759	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:43.513884068 CEST	192.168.2.6	1.1.1.1	0x3a4f	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:43.514045954 CEST	192.168.2.6	1.1.1.1	0x29f6	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Sep 26, 2024 06:38:44.068212032 CEST	192.168.2.6	1.1.1.1	0xc407	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:44.068341970 CEST	192.168.2.6	1.1.1.1	0x5056	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:44.071152925 CEST	192.168.2.6	1.1.1.1	0x56ac	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:44.071310997 CEST	192.168.2.6	1.1.1.1	0x1b2c	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:44.289896965 CEST	192.168.2.6	1.1.1.1	0xb8e9	Standard query (0)	o2.mouseflow.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:44.290097952 CEST	192.168.2.6	1.1.1.1	0x6b90	Standard query (0)	o2.mouseflow.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:44.436674118 CEST	192.168.2.6	1.1.1.1	0x9a18	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:44.436819077 CEST	192.168.2.6	1.1.1.1	0xfd83	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 26, 2024 06:38:44.784643888 CEST	192.168.2.6	1.1.1.1	0x908c	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:44.784786940 CEST	192.168.2.6	1.1.1.1	0xda7c	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:47.148936987 CEST	192.168.2.6	1.1.1.1	0xb6af	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:47.149274111 CEST	192.168.2.6	1.1.1.1	0xc9a7	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:47.631722927 CEST	192.168.2.6	1.1.1.1	0x2659	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:47.631928921 CEST	192.168.2.6	1.1.1.1	0x507c	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Sep 26, 2024 06:38:48.206577063 CEST	192.168.2.6	1.1.1.1	0x9e9c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:48.206984043 CEST	192.168.2.6	1.1.1.1	0x3422	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:49.136759043 CEST	192.168.2.6	1.1.1.1	0xd07a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:49.136921883 CEST	192.168.2.6	1.1.1.1	0xa38e	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:54.575603008 CEST	192.168.2.6	1.1.1.1	0xb8ed	Standard query (0)	sage.kindly.ai	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:54.575823069 CEST	192.168.2.6	1.1.1.1	0x4e64	Standard query (0)	sage.kindly.ai	65	IN (0x0001)	false
Sep 26, 2024 06:38:55.825819969 CEST	192.168.2.6	1.1.1.1	0xe3a2	Standard query (0)	sage.kindly.ai	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:55.826186895 CEST	192.168.2.6	1.1.1.1	0xbd0f	Standard query (0)	sage.kindly.ai	65	IN (0x0001)	false
Sep 26, 2024 06:38:55.856623888 CEST	192.168.2.6	1.1.1.1	0x66d4	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:55.857019901 CEST	192.168.2.6	1.1.1.1	0x3169	Standard query (0)	www.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:57.478562117 CEST	192.168.2.6	1.1.1.1	0x70f2	Standard query (0)	shelves.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:57.479413986 CEST	192.168.2.6	1.1.1.1	0x37ac	Standard query (0)	shelves.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:38:59.124864101 CEST	192.168.2.6	1.1.1.1	0x7044	Standard query (0)	cf.bstatic.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:38:59.125406981 CEST	192.168.2.6	1.1.1.1	0x4f99	Standard query (0)	cf.bstatic.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:03.823962927 CEST	192.168.2.6	1.1.1.1	0x2039	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:03.824523926 CEST	192.168.2.6	1.1.1.1	0xffc8	Standard query (0)	www.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:04.140633106 CEST	192.168.2.6	1.1.1.1	0xcd03	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:04.141285896 CEST	192.168.2.6	1.1.1.1	0x984d	Standard query (0)	www.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:04.725490093 CEST	192.168.2.6	1.1.1.1	0x7a81	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:04.983206987 CEST	192.168.2.6	1.1.1.1	0xc54	Standard query (0)	nellie.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:04.983540058 CEST	192.168.2.6	1.1.1.1	0x5797	Standard query (0)	nellie.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:05.517937899 CEST	192.168.2.6	1.1.1.1	0xe06b	Standard query (0)	account.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:05.518234968 CEST	192.168.2.6	1.1.1.1	0x6b88	Standard query (0)	account.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:10.220276117 CEST	192.168.2.6	1.1.1.1	0xdedf	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:10.220408916 CEST	192.168.2.6	1.1.1.1	0x5fdf	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Sep 26, 2024 06:39:12.255539894 CEST	192.168.2.6	1.1.1.1	0x2cd8	Standard query (0)	d8c14d4960ca.edge.sdk.awswaf.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:12.255827904 CEST	192.168.2.6	1.1.1.1	0xec71	Standard query (0)	d8c14d4960ca.edge.sdk.awswaf.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:12.434775114 CEST	192.168.2.6	1.1.1.1	0x8d8c	Standard query (0)	accommodations.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:12.434912920 CEST	192.168.2.6	1.1.1.1	0x60fe	Standard query (0)	accommodations.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:13.526578903 CEST	192.168.2.6	1.1.1.1	0xae7	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:13.526715040 CEST	192.168.2.6	1.1.1.1	0x4cae	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:17.782653093 CEST	192.168.2.6	1.1.1.1	0xb34	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:17.785540104 CEST	192.168.2.6	1.1.1.1	0x7c52	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:20.509527922 CEST	192.168.2.6	1.1.1.1	0x8471	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:21.079467058 CEST	192.168.2.6	1.1.1.1	0x5889	Standard query (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:21.079840899 CEST	192.168.2.6	1.1.1.1	0x192d	Standard query (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:24.008953094 CEST	192.168.2.6	1.1.1.1	0x5925	Standard query (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:24.009160995 CEST	192.168.2.6	1.1.1.1	0xe42d	Standard query (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:25.940256119 CEST	192.168.2.6	1.1.1.1	0xece3	Standard query (0)	partnerfeedback.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:25.940500975 CEST	192.168.2.6	1.1.1.1	0x7b28	Standard query (0)	partnerfeedback.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:27.346590042 CEST	192.168.2.6	1.1.1.1	0x7e16	Standard query (0)	eu.qualtrics.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:27.346942902 CEST	192.168.2.6	1.1.1.1	0x9955	Standard query (0)	eu.qualtrics.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:28.651503086 CEST	192.168.2.6	1.1.1.1	0x4977	Standard query (0)	partnerfeedback.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:28.651674986 CEST	192.168.2.6	1.1.1.1	0xc074	Standard query (0)	partnerfeedback.booking.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:33.609348059 CEST	192.168.2.6	1.1.1.1	0xd822	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:33.609482050 CEST	192.168.2.6	1.1.1.1	0x988c	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:36.385252953 CEST	192.168.2.6	1.1.1.1	0x9e72	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:36.385468006 CEST	192.168.2.6	1.1.1.1	0xefc5	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	65	IN (0x0001)	false
Sep 26, 2024 06:39:42.958018064 CEST	192.168.2.6	1.1.1.1	0x6835	Standard query (0)	admin.booking.com	A (IP address)	IN (0x0001)	false
Sep 26, 2024 06:39:42.958206892 CEST	192.168.2.6	1.1.1.1	0x2886	Standard query (0)	admin.booking.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:09 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 7a 66 67 38 74 34 62 7a 30 45 69 6c 69 6d 44 78 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 36 38 36 65 35 32 61 62 64 31 34 64 65 65 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: zfg8t4bz0EilimDx.1Context: 9686e52abd14dee2
2024-09-26 04:38:09 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-26 04:38:09 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 7a 66 67 38 74 34 62 7a 30 45 69 6c 69 6d 44 78 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 36 38 36 65 35 32 61 62 64 31 34 64 65 65 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 6f 58 63 6f 31 55 37 48 53 61 63 6c 38 36 6a 31 69 58 31 35 47 55 39 31 51 58 2f 41 6a 76 63 68 4b 72 36 77 4c 6d 4e 39 59 51 6a 46 39 73 52 43 55 2b 65 4b 78 79 38 6b 58 38 6f 38 4d 4f 31 55 6a 58 63 4b 4f 33 53 32 68 67 69 32 4b 2b 63 51 47 2f 6a 72 6d 51 67 35 76 63 67 52 46 76 34 67 35 74 2f 33 4f 56 39 54 56 66 7a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: zfg8t4bz0EilimDx.2Context: 9686e52abd14dee2<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCoXco1U7HSacl86j1iX15GU91QX/AjvchKr6wLmN9YQjF9sRCU+eKxy8kX8o8MO1UjXcKO3S2hgi2K+cQG/jrmQg5vcgRFv4g5t/3OV9TVfz
2024-09-26 04:38:09 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 7a 66 67 38 74 34 62 7a 30 45 69 6c 69 6d 44 78 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 36 38 36 65 35 32 61 62 64 31 34 64 65 65 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: zfg8t4bz0EilimDx.3Context: 9686e52abd14dee2<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-26 04:38:09 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-26 04:38:09 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4d 41 72 7a 6a 5a 2f 64 33 55 47 79 7a 63 4f 61 2b 4f 54 57 68 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: MArzjZ/d3UGyzcOa+OTWhg.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:11 UTC	856	OUT	GET /sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en HTTP/1.1 Host: check-hticompialnt520842.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:11 UTC	709	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 26 Sep 2024 04:38:12 GMT Cache-Control: max-age=1 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Qb9vfQWqwjhEq7KSdnK%2FBL13XwUX%2BXP1C%2F2oRx92%2FWLBiVVzKh5Iiu%2FhBS8VCTnrkpQPtfwGE9BoU4YCPavYrVsnMKBL3y%2B0lLhTHb5RKml3CX%2Fs%2FraVZmHgHt4yjO%2FaRIwCUPYNPYfx7QMh79L"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c90902318044373-EWR alt-svc: h3=":443"; ma=86400
2024-09-26 04:38:11 UTC	660	IN	Data Raw: 37 63 65 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c Data Ascii: 7ceb<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <title>Booking.com</title> <meta http-equiv="content-type" content="text/html; charset=UTF-8"/> <meta name="viewport" content="width=device-width,
2024-09-26 04:38:11 UTC	1369	IN	Data Raw: 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 38 32 36 5f 30 64 31 37 33 37 65 31 38 30 39 33 31 61 32 31 37 36 34 37 2e 63 73 73 22 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 35 37 5f 33 39 32 39 38 66 34 34 64 30 37 37 61 31 34 34 66 65 31 38 2e 63 73 73 22 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 62 61 6e 6e 65 72 2e 63 73 73 22 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a Data Ascii: "stylesheet" href="/static/stylesheets/826_0d1737e180931a217647.css"/> <link rel="stylesheet" href="/static/stylesheets/57_39298f44d077a144fe18.css"/> <link rel="stylesheet" href="/static/stylesheets/banner.css"/> <link rel="stylesheet" href="https:
2024-09-26 04:38:11 UTC	1369	IN	Data Raw: 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 2e 62 75 69 2d 75 2d 74 65 78 74 2d 6c 65 66 74 5c 40 6c 61 72 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 2e 62 75 69 2d 75 2d 74 65 78 74 2d 72 69 67 68 74 5c 40 6c 61 72 67 65 2c 20 2e 72 74 6c 20 2e 62 75 69 2d 75 2d 74 65 78 74 2d 6c 65 66 74 5c 40 6c 61 72 67 65 2c 20 5b 64 69 72 3d 72 74 6c 5d 20 2e 62 75 69 2d 75 2d 74 65 78 74 2d 6c 65 66 74 5c 40 6c 61 72 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: in-width: 1024px) { .bui-u-text-left\@large { text-align: left !important } .bui-u-text-right\@large, .rtl .bui-u-text-left\@large, [dir=rtl] .bui-u-text-left\@large { text-align: right !important
2024-09-26 04:38:11 UTC	1369	IN	Data Raw: 70 69 6e 6e 65 72 3a 61 66 74 65 72 2c 20 2e 62 75 69 2d 73 70 69 6e 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 36 63 65 34 3b 0a 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 62 75 69 2d 73 70 69 6e 6e 65 72 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: pinner:after, .bui-spinner:before { background: #006ce4; border-radius: 50%; content: ""; position: absolute; transform: translateY(-50%); z-index: 2 } .bui-spinner:after {
2024-09-26 04:38:11 UTC	1369	IN	Data Raw: 20 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 66 39 36 64 62 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b Data Ascii: #onetrust-banner-sdk { -ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%; } #onetrust-banner-sdk .onetrust-vendors-list-handler { cursor: pointer; color: #1f96db; font-size: inherit;
2024-09-26 04:38:11 UTC	1369	IN	Data Raw: 63 2d 73 64 6b 20 2e 70 6f 77 65 72 65 64 2d 62 79 2d 6c 6f 67 6f 2c 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 66 6f 6f 74 65 72 2d 6c 6f 67 6f 20 61 2c 0a 20 20 20 20 20 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 70 6f 77 65 72 65 64 2d 62 79 2d 6c 6f 67 6f 2c 0a 20 20 20 20 20 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 70 63 2d 66 6f 6f 74 65 72 2d 6c 6f 67 6f 20 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e Data Ascii: c-sdk .powered-by-logo, #onetrust-pc-sdk .ot-pc-footer-logo a, #ot-sync-ntfy .powered-by-logo, #ot-sync-ntfy .ot-pc-footer-logo a { background-size: contain; background-repeat: no-repeat; background-position
2024-09-26 04:38:11 UTC	1369	IN	Data Raw: 69 64 65 2c 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 0a 20 20 20 20 20 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 0a 20 20 20 20 20 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a Data Ascii: ide, #onetrust-pc-sdk .ot-hide, #ot-sync-ntfy .ot-hide { display: none !important; } #onetrust-banner-sdk button.ot-link-btn:hover, #onetrust-pc-sdk button.ot-link-btn:hover, #ot-sync-ntfy button.ot-link-btn:
2024-09-26 04:38:11 UTC	1369	IN	Data Raw: 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 68 6f 73 74 2d 74 69 74 6c 65 20 61 2c 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 6f 74 2d 68 6f 73 74 2d 6e 61 6d 65 20 61 2c 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 74 65 78 74 2c 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 6f 74 2d 61 63 63 2d 74 78 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 Data Ascii: auto; } #onetrust-pc-sdk li .host-title a, #onetrust-pc-sdk li .ot-host-name a, #onetrust-pc-sdk li .accordion-text, #onetrust-pc-sdk li .ot-acc-txt { z-index: 2; position: relative; } #onet
2024-09-26 04:38:11 UTC	1369	IN	Data Raw: 20 34 30 30 6d 73 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 2e 6f 74 2d 68 69 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 6f 6e 65 74 72 75 73 74 2d 70 63 2d 64 61 72 6b 2d 66 69 6c 74 65 72 2e 6f 74 2d 68 69 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 74 2d 73 64 6b 2d 62 74 6e 2e 6f 74 2d 73 64 6b Data Ascii: 400ms; animation-timing-function: ease-in-out; } #onetrust-pc-sdk.ot-hide { display: none !important; } .onetrust-pc-dark-filter.ot-hide { display: none !important; } #ot-sdk-btn.ot-sdk
2024-09-26 04:38:11 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 37 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d Data Ascii: tion: underline; } @media only screen and (min-width: 426px) and (max-width: 896px) and (orientation: landscape) { #onetrust-pc-sdk p { font-size: 0.75em; } } #onetrust-banner-sdk .banner-option-

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:12 UTC	786	OUT	GET /static/stylesheets/45_1975cbc2f7eaad75f590.css HTTP/1.1 Host: check-hticompialnt520842.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:12 UTC	746	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 92160 Connection: close last-modified: Wed, 18 Sep 2024 14:35:01 GMT etag: "8c4afe43b0cacd18053844274523709c" Expires: Thu, 26 Sep 2024 04:38:13 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ls38hUZgBbLoIouSHIeg8LJES%2BEdV6TbdyH1RL%2B995m%2FXytH3QQFbSh3Vd0Z%2BxSbQKR8%2FAo0sT8%2FdfUx9iR2mAT6f9ywV58PucgNyhIRKMagRyvn3YpbbrpAblyEiUO3%2BXaRJ7U1GYAqTk63wJM%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9090270d384362-EWR
2024-09-26 04:38:12 UTC	623	IN	Data Raw: 2e 71 4e 79 53 5f 50 4a 73 44 6c 37 71 4c 71 33 36 32 44 65 34 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 51 5a 62 45 5f 52 4c 36 5f 45 59 58 31 38 71 4e 69 6e 4e 4d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 67 32 50 37 76 5a 64 4f 56 67 38 41 34 30 54 6d 51 41 43 77 7b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 76 61 72 28 2d 2d 62 75 69 5f 74 69 6d 69 6e 67 2d 64 65 6c 69 62 65 72 61 74 65 29 20 76 61 72 28 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 6c 6f 77 2d 6f 75 74 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 6f 70 61 63 69 74 79 2c 74 72 61 6e 73 66 6f Data Ascii: .qNyS_PJsDl7qLq362De4{display:inline-block;vertical-align:middle}.QZbE_RL6_EYX18qNinNM{display:block}.g2P7vZdOVg8A40TmQACw{opacity:0;pointer-events:none;transition:var(--bui_timing-deliberate) var(--bui_easing-slow-out);transition-property:opacity,transfo
2024-09-26 04:38:12 UTC	1369	IN	Data Raw: 41 47 71 46 66 38 76 64 4d 4a 6d 53 55 44 6e 4d 35 5f 4e 42 2e 51 74 51 72 6a 77 76 4d 4e 70 30 76 6e 62 6b 76 6b 78 53 41 2c 2e 67 32 50 37 76 5a 64 4f 56 67 38 41 34 30 54 6d 51 41 43 77 2e 42 57 74 54 41 33 73 71 77 35 44 32 73 65 38 70 47 6d 33 73 2e 51 74 51 72 6a 77 76 4d 4e 70 30 76 6e 62 6b 76 6b 78 53 41 2c 2e 67 32 50 37 76 5a 64 4f 56 67 38 41 34 30 54 6d 51 41 43 77 2e 68 50 64 42 4e 37 73 57 54 69 44 46 6b 6c 69 6e 39 4c 65 79 2e 51 74 51 72 6a 77 76 4d 4e 70 30 76 6e 62 6b 76 6b 78 53 41 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 2a 2d 31 29 29 7d 2e 67 32 50 37 76 5a 64 4f 56 67 38 41 34 30 54 6d 51 41 43 77 2e 44 32 31 4d 58 56 65 59 37 45 Data Ascii: AGqFf8vdMJmSUDnM5_NB.QtQrjwvMNp0vnbkvkxSA,.g2P7vZdOVg8A40TmQACw.BWtTA3sqw5D2se8pGm3s.QtQrjwvMNp0vnbkvkxSA,.g2P7vZdOVg8A40TmQACw.hPdBN7sWTiDFklin9Ley.QtQrjwvMNp0vnbkvkxSA{transform:translateY(calc(var(--bui_spacing_2x)*-1))}.g2P7vZdOVg8A40TmQACw.D21MXVeY7E
2024-09-26 04:38:12 UTC	1369	IN	Data Raw: 7a 74 6d 33 49 72 42 69 56 2e 51 74 51 72 6a 77 76 4d 4e 70 30 76 6e 62 6b 76 6b 78 53 41 2c 2e 67 32 50 37 76 5a 64 4f 56 67 38 41 34 30 54 6d 51 41 43 77 2e 64 72 62 7a 4d 77 45 6a 56 4c 6c 7a 41 48 4e 47 6f 38 62 77 2e 51 74 51 72 6a 77 76 4d 4e 70 30 76 6e 62 6b 76 6b 78 53 41 2c 2e 67 32 50 37 76 5a 64 4f 56 67 38 41 34 30 54 6d 51 41 43 77 2e 6f 50 59 64 5a 55 4f 65 6e 77 4a 76 77 4b 72 74 42 6e 33 6a 2e 51 74 51 72 6a 77 76 4d 4e 70 30 76 6e 62 6b 76 6b 78 53 41 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 29 7d 2e 67 32 50 37 76 5a 64 4f 56 67 38 41 34 30 54 6d 51 41 43 77 2e 51 74 51 72 6a 77 76 4d 4e 70 30 76 6e 62 6b 76 6b 78 53 41 7b 6f 70 61 63 69 74 79 3a 31 3b Data Ascii: ztm3IrBiV.QtQrjwvMNp0vnbkvkxSA,.g2P7vZdOVg8A40TmQACw.drbzMwEjVLlzAHNGo8bw.QtQrjwvMNp0vnbkvkxSA,.g2P7vZdOVg8A40TmQACw.oPYdZUOenwJvwKrtBn3j.QtQrjwvMNp0vnbkvkxSA{transform:translate(var(--bui_spacing_2x))}.g2P7vZdOVg8A40TmQACw.QtQrjwvMNp0vnbkvkxSA{opacity:1;
2024-09-26 04:38:12 UTC	1369	IN	Data Raw: 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 79 5f 31 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 79 5f 31 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 7d 2e 4d 6a 66 62 72 4e 6c 55 37 67 39 56 68 71 33 31 70 30 37 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 79 5f 32 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 79 5f 32 5f 66 6f 6e 74 2d 73 69 7a Data Ascii: _bui_small_font_display_1_font-weight);line-height:var(--DO_NOT_USE_bui_small_font_display_1_line-height)}.MjfbrNlU7g9Vhq31p070{font-family:var(--DO_NOT_USE_bui_small_font_display_2_font-family);font-size:var(--DO_NOT_USE_bui_small_font_display_2_font-siz
2024-09-26 04:38:12 UTC	1369	IN	Data Raw: 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 66 65 61 74 75 72 65 64 5f 33 5f 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 66 65 61 74 75 72 65 64 5f 33 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 66 65 61 74 75 72 65 64 5f 33 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 7d 2e 4d 5a 62 70 51 7a 6a 4b 47 77 71 55 4f 32 6b 36 75 64 78 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 68 65 61 64 6c 69 6e 65 5f 31 Data Ascii: T_USE_bui_small_font_featured_3_font-size);font-weight:var(--DO_NOT_USE_bui_small_font_featured_3_font-weight);line-height:var(--DO_NOT_USE_bui_small_font_featured_3_line-height)}.MZbpQzjKGwqUO2k6udx6{font-family:var(--DO_NOT_USE_bui_small_font_headline_1
2024-09-26 04:38:12 UTC	1369	IN	Data Raw: 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 32 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 32 5f 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 32 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 32 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 7d 2e 52 7a 46 4e 47 4a 58 73 6d 63 Data Ascii: --DO_NOT_USE_bui_small_font_strong_2_font-family);font-size:var(--DO_NOT_USE_bui_small_font_strong_2_font-size);font-weight:var(--DO_NOT_USE_bui_small_font_strong_2_font-weight);line-height:var(--DO_NOT_USE_bui_small_font_strong_2_line-height)}.RzFNGJXsmc
2024-09-26 04:38:12 UTC	1369	IN	Data Raw: 6f 64 79 5f 32 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 7d 2e 43 6e 58 63 6d 74 50 54 32 38 77 7a 34 5f 67 49 46 56 6b 78 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 73 6d 61 6c 6c 5f 31 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 73 6d 61 6c 6c 5f 31 5f 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 73 6d 61 6c 6c 5f 66 6f 6e 74 5f 73 6d 61 6c 6c 5f 31 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f Data Ascii: ody_2_line-height)}.CnXcmtPT28wz4_gIFVkx{font-family:var(--DO_NOT_USE_bui_small_font_small_1_font-family);font-size:var(--DO_NOT_USE_bui_small_font_small_1_font-size);font-weight:var(--DO_NOT_USE_bui_small_font_small_1_font-weight);line-height:var(--DO_NO
2024-09-26 04:38:12 UTC	1369	IN	Data Raw: 61 79 5f 31 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 7d 2e 4d 6a 66 62 72 4e 6c 55 37 67 39 56 68 71 33 31 70 30 37 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6d 65 64 69 75 6d 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 79 5f 32 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6d 65 64 69 75 6d 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 79 5f 32 5f 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6d 65 64 69 75 6d 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 79 5f 32 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 Data Ascii: ay_1_line-height)}.MjfbrNlU7g9Vhq31p070{font-family:var(--DO_NOT_USE_bui_medium_font_display_2_font-family);font-size:var(--DO_NOT_USE_bui_medium_font_display_2_font-size);font-weight:var(--DO_NOT_USE_bui_medium_font_display_2_font-weight);line-height:var
2024-09-26 04:38:12 UTC	1369	IN	Data Raw: 45 5f 62 75 69 5f 6d 65 64 69 75 6d 5f 66 6f 6e 74 5f 66 65 61 74 75 72 65 64 5f 33 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6d 65 64 69 75 6d 5f 66 6f 6e 74 5f 66 65 61 74 75 72 65 64 5f 33 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 7d 2e 4d 5a 62 70 51 7a 6a 4b 47 77 71 55 4f 32 6b 36 75 64 78 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6d 65 64 69 75 6d 5f 66 6f 6e 74 5f 68 65 61 64 6c 69 6e 65 5f 31 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6d 65 64 69 75 6d 5f 66 6f 6e 74 5f 68 65 61 64 6c 69 6e 65 5f 31 Data Ascii: E_bui_medium_font_featured_3_font-weight);line-height:var(--DO_NOT_USE_bui_medium_font_featured_3_line-height)}.MZbpQzjKGwqUO2k6udx6{font-family:var(--DO_NOT_USE_bui_medium_font_headline_1_font-family);font-size:var(--DO_NOT_USE_bui_medium_font_headline_1
2024-09-26 04:38:12 UTC	1369	IN	Data Raw: 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6d 65 64 69 75 6d 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 32 5f 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6d 65 64 69 75 6d 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 32 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6d 65 64 69 75 6d 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 32 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 7d 2e 52 7a 46 4e 47 4a 58 73 6d 63 74 39 78 65 38 79 74 65 44 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6d 65 64 69 Data Ascii: ont-size:var(--DO_NOT_USE_bui_medium_font_strong_2_font-size);font-weight:var(--DO_NOT_USE_bui_medium_font_strong_2_font-weight);line-height:var(--DO_NOT_USE_bui_medium_font_strong_2_line-height)}.RzFNGJXsmct9xe8yteDr{font-family:var(--DO_NOT_USE_bui_medi

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:13 UTC	546	OUT	GET /jquery-3.6.4.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://check-hticompialnt520842.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:13 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89795 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15ec3" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2578987 Date: Thu, 26 Sep 2024 04:38:13 GMT X-Served-By: cache-lga21953-LGA, cache-ewr-kewr1740076-EWR X-Cache: HIT, HIT X-Cache-Hits: 3350, 0 X-Timer: S1727325493.215783,VS0,VE1 Vary: Accept-Encoding
2024-09-26 04:38:13 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 34 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.4 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-09-26 04:38:13 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-09-26 04:38:13 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 79 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=y.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-09-26 04:38:13 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-09-26 04:38:13 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-09-26 04:38:13 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 76 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ve(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-09-26 04:38:13 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ve(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-09-26 04:38:13 UTC	1378	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 5b 6e 5d 3a 5b 5d 7d 7d 29 3a 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f Data Ascii: "!=typeof t.getElementById&&E){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=functio
2024-09-26 04:38:13 UTC	1378	IN	Data Raw: 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 Data Ascii: ).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length\|\|y.push("\\["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|y.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|y.push(".#.+[+~]"),e.query
2024-09-26 04:38:13 UTC	1378	IN	Data Raw: 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 77 68 69 6c 65 28 74 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 74 3d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 6a 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 6e 3d 21 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 Data Ascii: ))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},j=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPositi

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:13 UTC	589	OUT	GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://check-hticompialnt520842.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:13 UTC	919	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:13 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5f5628a2-11846" Last-Modified: Mon, 07 Sep 2020 12:33:38 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 475155 Expires: Tue, 16 Sep 2025 04:38:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y%2Br3zsTScME4mOemcKy1p%2BjGy4xsGJL%2B5DRDNWexcFJqZzU9bLvZ6qrlKZVnZL8GmbHNmxGr4AxCmGZu8Y3MuBLAih7ck1ICdve1%2BKo6U0kqgc222TS08tAVg8C4bO6AB6K%2BIzGr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c90902c9bd88c35-EWR
2024-09-26 04:38:13 UTC	450	IN	Data Raw: 33 39 38 35 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 73 3a 2f 2f 61 6e 69 6d 61 74 65 2e 73 74 79 6c 65 2f 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 34 2e 31 2e 31 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 41 6e 69 6d 61 74 65 2e 63 73 73 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 72 Data Ascii: 3985@charset "UTF-8";/! animate.css - https://animate.style/ * Version - 4.1.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2020 Animate.css */:root{--animate-duration:1s;--animate-delay:1s;--animate-r
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 2d 6d 6f 64 65 3a 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 69 6e 66 69 6e 69 74 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 72 65 70 65 61 74 2d 31 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 2d 77 65 Data Ascii: -mode:both;animation-fill-mode:both}.animate__animated.animate__infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animate__animated.animate__repeat-1{-webkit-animation-iteration-count:1;animation-iteration-count:1;-we
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 34 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 34 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 34 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 34 29 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 64 65 6c 61 79 2d 35 73 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 35 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d Data Ascii: -animation-delay:4s;animation-delay:4s;-webkit-animation-delay:calc(var(--animate-delay)4);animation-delay:calc(var(--animate-delay)4)}.animate__animated.animate__delay-5s{-webkit-animation-delay:5s;animation-delay:5s;-webkit-animation-delay:calc(var(--
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 5b 63 6c 61 73 73 2a 3d 4f 75 74 5d 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 30 25 2c 32 30 25 2c 35 33 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 Data Ascii: ;animation-iteration-count:1!important}.animate__animated[class*=Out]{opacity:0}}@-webkit-keyframes bounce{0%,20%,53%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1);-webkit-transf
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 31 29 7d 37 30 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 Data Ascii: on:cubic-bezier(.755,.05,.855,.06);-webkit-transform:translate3d(0,-30px,0) scaleY(1.1);transform:translate3d(0,-30px,0) scaleY(1.1)}70%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 72 6d 3a 73 63 61 6c 65 58 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 70 75 6c 73 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 75 62 62 65 72 42 61 6e 64 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: rm:scaleX(1);transform:scaleX(1)}}.animate__pulse{-webkit-animation-name:pulse;animation-name:pulse;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out}@-webkit-keyframes rubberBand{0%{-webkit-transform:scaleX(1);transform:
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 7d 32 30 25 2c 34 30 25 2c 36 30 25 2c 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 6b 65 58 7b 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 31 30 25 2c 33 30 25 2c 35 30 25 2c 37 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 Data Ascii: translate3d(-10px,0,0);transform:translate3d(-10px,0,0)}20%,40%,60%,80%{-webkit-transform:translate3d(10px,0,0);transform:translate3d(10px,0,0)}}@keyframes shakeX{0%,to{-webkit-transform:translateZ(0);transform:translateZ(0)}10%,30%,50%,70%,90%{-webkit-tr
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 59 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 59 28 2d 35 64 65 67 29 7d 34 33 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 68 Data Ascii: kit-transform:translateX(-3px) rotateY(-5deg);transform:translateX(-3px) rotateY(-5deg)}43.5%{-webkit-transform:translateX(2px) rotateY(3deg);transform:translateX(2px) rotateY(3deg)}50%{-webkit-transform:translateX(0);transform:translateX(0)}}@keyframes h
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 30 64 65 67 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 7d 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 73 77 69 6e 67 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 63 65 6e 74 65 72 3b 74 72 61 6e 73 Data Ascii: nsform:rotate(-10deg)}60%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}80%{-webkit-transform:rotate(-5deg);transform:rotate(-5deg)}to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}.animate__swing{-webkit-transform-origin:top center;trans
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 33 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 33 64 Data Ascii: {-webkit-transform:translate3d(-25%,0,0) rotate(-5deg);transform:translate3d(-25%,0,0) rotate(-5deg)}30%{-webkit-transform:translate3d(20%,0,0) rotate(3deg);transform:translate3d(20%,0,0) rotate(3deg)}45%{-webkit-transform:translate3d(-15%,0,0) rotate(-3d

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:13 UTC	582	OUT	GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://check-hticompialnt520842.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:13 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec1-514" Last-Modified: Mon, 04 May 2020 16:11:45 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 637330 Expires: Tue, 16 Sep 2025 04:38:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PoFwGIr4q96krPXfi3KSKlCaKDhKvPVPCoLhtEMVUqWgp4wRGJUWASnEaZTaHpkwh8tZKboiS%2FDlphRP8kbFy4NItY4otZ03JfftuI79SGJN4YwOogY5g26rl5UoLQ0usRq9V4bm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c90902c991b8c15-EWR
2024-09-26 04:38:13 UTC	446	IN	Data Raw: 35 31 34 0d 0a 2f 2a 21 20 6a 71 75 65 72 79 2e 63 6f 6f 6b 69 65 20 76 31 2e 34 2e 31 20 7c 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 61 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 61 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 72 65 74 75 72 6e 20 68 2e 72 61 77 3f 61 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 72 65 74 75 72 6e 20 68 2e 72 Data Ascii: 514/! jquery.cookie v1.4.1 \| MIT /!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?a(require("jquery")):a(jQuery)}(function(a){function b(a){return h.raw?a:encodeURIComponent(a)}function c(a){return h.r
2024-09-26 04:38:13 UTC	861	IN	Data Raw: 61 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 72 65 70 6c 61 63 65 28 67 2c 22 20 22 29 29 2c 68 2e 6a 73 6f 6e 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 3a 61 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 62 2c 63 29 7b 76 61 72 20 64 3d 68 2e 72 61 77 3f 62 3a 65 28 62 29 3b 72 65 74 75 72 6e 20 61 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 29 3f 63 28 64 29 3a 64 7d 76 61 72 20 67 3d 2f 5c 2b 2f 67 2c 68 3d 61 2e 63 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 67 2c 69 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 67 26 26 21 61 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 29 29 7b 69 66 28 69 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 68 2e 64 65 66 61 75 6c 74 73 2c 69 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 Data Ascii: a=decodeURIComponent(a.replace(g," ")),h.json?JSON.parse(a):a}catch(b){}}function f(b,c){var d=h.raw?b:e(b);return a.isFunction(c)?c(d):d}var g=/\+/g,h=a.cookie=function(e,g,i){if(void 0!==g&&!a.isFunction(g)){if(i=a.extend({},h.defaults,i),"number"==type
2024-09-26 04:38:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:13 UTC	787	OUT	GET /static/stylesheets/938_afde72b9aaa8302ff017.css HTTP/1.1 Host: check-hticompialnt520842.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:13 UTC	734	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:13 GMT Content-Type: text/css; charset=utf-8 Content-Length: 74745 Connection: close last-modified: Wed, 18 Sep 2024 14:35:01 GMT etag: "f858ccd002514ceb4df0bd035d5b49a4" Expires: Thu, 26 Sep 2024 04:38:14 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xVMINzjoRGlxMQlRuuoPcqV53dKKwJHY3wSYcIcz9Mo2aTsolaAX4EzjiGPUHnv8vQWLFz%2FQWgtGUi7hCCgShO4PIRcVVa2ixB32UoPktIhzyZfIltMnbov1rkeyE8g0juYGLqHfNXpzSLHTw%2Bfz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c90902d681a8c69-EWR
2024-09-26 04:38:13 UTC	635	IN	Data Raw: 2e 77 6b 54 4e 64 51 6a 41 66 52 56 62 4b 76 46 42 69 52 31 54 7b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 5f 6e 77 47 70 72 66 4c 5a 66 5a 67 4d 46 6a 73 6d 61 70 37 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 7d 2e 5a 47 79 37 42 4c 43 58 34 58 4f 76 66 41 44 42 46 6a 31 31 2c 2e 62 71 57 37 67 72 61 48 68 30 39 43 54 4e 41 4e 4f 72 58 74 7b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d Data Ascii: .wkTNdQjAfRVbKvFBiR1T{border:0;margin:0;padding:0}._nwGprfLZfZgMFjsmap7{align-items:flex-end;display:flex;padding:0 0 var(--bui_spacing_1x)}.ZGy7BLCX4XOvfADBFj11,.bqW7graHh09CTNANOrXt{-webkit-margin-start:var(--bui_spacing_1x);display:inline-block;margin-
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 74 6f 3b 72 69 67 68 74 3a 30 7d 2e 45 4d 71 41 43 48 4e 46 4b 49 72 42 6a 4c 6e 43 64 59 62 49 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 35 70 78 29 7b 2e 45 4d 71 41 43 48 4e 46 4b 49 72 42 6a 4c 6e 43 64 59 62 49 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 34 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 77 69 64 74 68 3a 31 30 30 25 7d 7d 2e 67 73 71 49 35 74 78 4a 65 77 34 6e 35 46 37 34 65 31 65 70 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 4a 76 64 37 61 35 32 41 4f 7a 54 38 62 7a 36 43 62 42 44 31 Data Ascii: to;right:0}.EMqACHNFKIrBjLnCdYbI{display:none}@media (max-width:575px){.EMqACHNFKIrBjLnCdYbI{display:block;height:44px;position:absolute;top:50%;transform:translateY(-50%);width:100%}}.gsqI5txJew4n5F74e1ep{cursor:pointer;display:flex}.Jvd7a52AOzT8bz6CbBD1
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 63 54 64 4a 4e 41 53 72 6b 62 45 5f 6d 41 37 4b 69 35 59 51 3a 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 7e 2e 67 73 71 49 35 74 78 4a 65 77 34 6e 35 46 37 34 65 31 65 70 20 2e 53 65 68 35 6b 39 49 4d 32 36 4d 48 32 48 4f 78 4f 33 71 32 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 61 63 74 69 6f 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 68 61 6c 66 29 3b 6c 65 66 74 3a 35 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: n_background)}.cTdJNASrkbE_mA7Ki5YQ:indeterminate~.gsqI5txJew4n5F74e1ep .Seh5k9IM26MH2HOxO3q2:before{background:var(--bui_color_on_action_background);border-radius:1px;content:"";height:var(--bui_spacing_half);left:50%;position:absolute;top:50%;transform:
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 7d 2e 63 54 64 4a 4e 41 53 72 6b 62 45 5f 6d 41 37 4b 69 35 59 51 3a 64 69 73 61 62 6c 65 64 7e 2e 67 73 71 49 35 74 78 4a 65 77 34 6e 35 46 37 34 65 31 65 70 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 5b 64 61 74 61 2d 62 75 69 2d 6b 65 79 62 6f 61 72 64 5d 20 2e 63 54 64 4a 4e 41 53 72 6b 62 45 5f 6d 41 37 4b 69 35 59 51 3a 66 6f 63 75 73 7e 2e 67 73 71 49 35 74 78 4a 65 77 34 6e 35 46 37 34 65 31 65 70 20 2e 53 65 68 35 6b 39 49 4d 32 36 4d 48 32 48 4f 78 4f 33 71 32 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 32 70 78 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 62 61 73 65 29 2c 30 20 30 20 30 20 34 70 78 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 62 6f 72 Data Ascii: }.cTdJNASrkbE_mA7Ki5YQ:disabled~.gsqI5txJew4n5F74e1ep{cursor:not-allowed}[data-bui-keyboard] .cTdJNASrkbE_mA7Ki5YQ:focus~.gsqI5txJew4n5F74e1ep .Seh5k9IM26MH2HOxO3q2{box-shadow:0 0 0 2px var(--bui_color_background_base),0 0 0 4px var(--bui_color_action_bor
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 6d 61 72 67 69 6e 3a 30 7d 68 31 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 68 65 61 64 6c 69 6e 65 5f 32 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 Data Ascii: _large_font_body_2_font-size);font-weight:var(--DO_NOT_USE_bui_large_font_body_2_font-weight);line-height:var(--DO_NOT_USE_bui_large_font_body_2_line-height);margin:0}h1{font-family:var(--DO_NOT_USE_bui_large_font_headline_2_font-family);font-size:var(--D
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 68 31 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 32 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 33 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 34 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 35 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 36 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 35 70 78 29 7b 2e 50 43 63 75 49 4b 70 47 30 30 32 38 56 37 46 65 5f 55 77 70 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 30 21 69 6d 70 Data Ascii: p:first-child{margin-top:0}h1:last-child,h2:last-child,h3:last-child,h4:last-child,h5:last-child,h6:last-child,p:last-child{margin-bottom:0}@media (max-width:575px){.PCcuIKpG0028V7Fe_Uwp{border-left:0!important;border-radius:0!important;border-right:0!imp
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 5f 31 30 30 29 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 62 6f 64 79 5f 31 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: {-webkit-appearance:none;-moz-appearance:none;appearance:none;background:none;border:none;border-radius:var(--bui_border_radius_100);box-sizing:border-box;display:block;flex-grow:1;font-family:var(--DO_NOT_USE_bui_large_font_body_1_font-family);font-size:
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 61 55 46 31 57 41 45 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 62 6f 72 64 65 72 29 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 77 69 64 74 68 5f 32 30 30 29 7d 2e 5a 4d 48 39 68 30 48 43 59 48 39 47 47 4e 78 48 6e 58 47 4a 3a 64 69 73 61 62 6c 65 64 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 64 69 73 61 62 6c 65 64 29 7d 2e 5a 4d 48 39 68 30 48 43 59 48 39 47 47 4e 78 48 6e 58 47 4a 3a 64 69 73 61 62 6c 65 64 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 Data Ascii: aUF1WAE{border-color:var(--bui_color_action_border);border-width:var(--bui_border_width_200)}.ZMH9h0HCYH9GGNxHnXGJ:disabled::-moz-placeholder{color:var(--bui_color_foreground_disabled)}.ZMH9h0HCYH9GGNxHnXGJ:disabled:-ms-input-placeholder{color:var(--bui_c
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 5f 32 78 29 3b 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 29 7d 2e 58 58 69 78 34 39 74 34 6e 41 73 6e 5a 69 62 6c 44 41 61 52 20 2e 41 58 78 6e 4a 62 78 34 33 5f 30 39 59 30 58 55 75 30 6b 65 3a 61 66 74 65 72 7b 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 29 3b 74 6f 70 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 29 7d 2e 6e 77 41 56 32 65 53 4f 38 47 57 39 78 66 4c 67 31 41 6c 6b 2e 75 30 34 4a 36 43 67 68 36 4e 64 4c 6e 59 73 53 74 4d 67 75 20 2e 4b 6c 57 69 46 6e 57 44 32 4b 79 55 6a 61 55 46 31 57 41 45 2c 2e 75 30 34 4a 36 43 67 68 36 4e 64 4c 6e 59 73 53 74 4d 67 75 20 2e 4b 6c 57 69 46 6e 57 44 32 4b 79 55 6a 61 55 46 Data Ascii: _2x);padding-inline-end:var(--bui_spacing_3x)}.XXix49t4nAsnZiblDAaR .AXxnJbx43_09Y0XUu0ke:after{bottom:var(--bui_spacing_3x);top:var(--bui_spacing_3x)}.nwAV2eSO8GW9xfLg1Alk.u04J6Cgh6NdLnYsStMgu .KlWiFnWD2KyUjaUF1WAE,.u04J6Cgh6NdLnYsStMgu .KlWiFnWD2KyUjaUF
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 31 6b 6b 7a 58 67 58 42 5f 34 70 72 6d 44 30 66 78 6b 69 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 7d 2e 71 31 6b 6b 7a 58 67 58 42 5f 34 70 72 6d 44 30 66 78 6b 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 51 61 36 58 6f 31 47 65 32 43 6a 74 42 50 57 71 56 53 55 6f 20 2e 71 31 6b 6b 7a 58 67 58 42 5f 34 70 72 6d 44 30 66 78 6b 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 71 31 6b 6b 7a 58 67 58 42 5f 34 70 72 6d 44 30 66 78 6b 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 6d 41 52 54 4b 41 74 47 Data Ascii: 1kkzXgXB_4prmD0fxki{margin-left:0;margin-right:var(--bui_spacing_1x)}.q1kkzXgXB_4prmD0fxki:first-child{margin-left:0}.Qa6Xo1Ge2CjtBPWqVSUo .q1kkzXgXB_4prmD0fxki:first-child,[dir=rtl] .q1kkzXgXB_4prmD0fxki:first-child{margin-left:0;margin-right:0}.mARTKAtG

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Windows Analysis Report
https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:13 UTC	787	OUT	GET /static/stylesheets/826_0d1737e180931a217647.css HTTP/1.1 Host: check-hticompialnt520842.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:13 UTC	742	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:13 GMT Content-Type: text/css; charset=utf-8 Content-Length: 61251 Connection: close last-modified: Wed, 18 Sep 2024 14:35:01 GMT etag: "df014762f804c68521fc0a6236958872" Expires: Thu, 26 Sep 2024 04:38:14 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HAaNLqMMuWsQH3TAn7PVlq0ly1OHQ7U6ZTk1l907EiLD0RqBb%2BY9buojwCiTxM87pJizX1%2BUMrdiPlpbCMhWCf6B9Wb%2BDe65Ckgamrx6%2BMKYUWSjw8y8247y9G0K53XOq%2FZhwRCA63aVt5Ff9%2FCI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c90902d9885c341-EWR
2024-09-26 04:38:13 UTC	627	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 62 75 69 5f 6c 61 72 67 65 5f 62 72 65 61 6b 70 6f 69 6e 74 3a 39 39 32 70 78 3b 2d 2d 62 75 69 5f 68 75 67 65 5f 62 72 65 61 6b 70 6f 69 6e 74 3a 31 32 30 30 70 78 7d 2e 70 61 72 74 6e 65 72 2d 68 65 61 64 65 72 3e 68 65 61 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 70 72 69 6d 61 72 79 29 7d 3a 72 6f 6f 74 7b 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 65 3a 33 30 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 34 35 2c 30 2e 30 34 35 2c 30 2e 33 35 35 2c 31 29 7d 2e 74 72 61 6e 73 69 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2d 34 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 20 31 30 Data Ascii: :root{--bui_large_breakpoint:992px;--bui_huge_breakpoint:1200px}.partner-header>header{background:var(--bui_color_primary)}:root{--transition-time:300ms cubic-bezier(0.645,0.045,0.355,1)}.transition-container{margin:0 -4px;overflow:hidden;padding:0 4px 10
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 78 69 74 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 2e 73 6c 69 64 65 2d 65 78 69 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 7d 2e 73 6c 69 64 65 2d 65 78 69 74 2d 61 63 74 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 73 6c 69 64 65 2d 62 61 63 6b 2d 65 6e 74 65 72 2c 2e 73 6c 69 64 65 2d 65 78 69 74 2d 61 63 74 69 76 65 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 7d 2e 73 6c 69 64 65 2d 62 61 63 6b 2d 65 6e 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 6c 69 64 65 2d 62 61 63 6b 2d 65 6e 74 65 72 2d 61 63 74 69 76 65 7b 6f 70 61 63 69 74 79 3a Data Ascii: xit{opacity:1;transform:translateX(0)}.slide-exit{position:absolute;top:0}.slide-exit-active{position:absolute}.slide-back-enter,.slide-exit-active{opacity:0;transform:translateX(-100%)}.slide-back-enter{position:relative}.slide-back-enter-active{opacity:
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 61 6e 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 61 70 5f 6d 61 78 5f 77 69 64 74 68 29 7d 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6c 6f 61 64 69 6e 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6c 6f 61 64 69 6e 67 3a 61 66 74 65 72 7b 62 6f 74 74 6f 6d 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 7d 2e 62 75 69 Data Ascii: anel-container{margin-left:auto;margin-right:auto;max-width:100%;width:var(--ap_max_width)}.access-panel-container--loading{position:relative}.access-panel-container--loading:after{bottom:0;content:"";left:0;position:absolute;right:0;top:0;z-index:99}.bui
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 77 65 69 67 68 74 3a 35 30 30 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 38 70 78 20 34 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6c 69 6e 6b 2d 72 65 63 6f 76 65 72 79 2d 6f 70 74 69 6f 6e 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 7d 2e 65 78 74 5f 70 61 72 74 6e 65 72 5f 6c 69 6e 6b 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 7d 2e 65 78 74 5f 70 61 72 74 6e 65 72 5f 6c 69 6e 6b 73 20 61 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 66 6f 72 65 67 72 6f 75 6e 64 29 7d 2e 65 78 74 5f 70 61 72 74 6e 65 72 5f 6c 69 6e 6b 73 20 68 72 7b 62 6f 72 64 65 72 3a 30 Data Ascii: weight:500;padding:2px 8px 4px;text-decoration:underline}.link-recovery-options{margin-top:var(--bui_spacing_4x)}.ext_partner_links{font-size:12px;margin-top:24px}.ext_partner_links a{color:var(--bui_color_action_foreground)}.ext_partner_links hr{border:0
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 30 7d 2e 69 6e 70 75 74 2d 77 72 61 70 70 65 72 2d 73 6d 73 2d 63 6f 64 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 69 6e 6c 69 6e 65 2d 73 65 6e 64 2d 63 6f 64 65 2d 62 74 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 72 29 3b 7a 2d 69 6e 64 65 78 3a 36 7d 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 5f 5f 73 6f 63 69 61 6c 2d 64 69 76 69 64 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b Data Ascii: put-container{height:0;overflow:hidden;width:0}.input-wrapper-sms-code{position:relative}.inline-send-code-btn{position:absolute;right:0;top:var(--bui_unit_larger);z-index:6}.access-panel__social-divider{align-items:center;display:flex;flex-direction:row;
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 73 2d 70 61 6e 65 6c 5f 5f 73 6f 63 69 61 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 38 70 78 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 35 30 70 78 29 7b 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 5f 5f 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 37 32 70 78 3b 6d 61 72 67 69 6e 3a 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 29 3b 70 61 64 64 69 6e 67 3a 32 33 70 78 3b 77 69 64 74 68 3a 37 32 70 78 7d 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 5f 5f 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 73 7b 6d 61 72 67 69 6e 3a 30 20 30 20 2d 34 70 78 7d 2e 73 6f 63 69 61 6c 2d 65 78 70 61 6e 64 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 3a 31 31 70 78 20 30 20 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 6d 65 64 69 75 Data Ascii: s-panel__social{margin-bottom:-8px}@media (min-width:350px){.access-panel__social-button{height:72px;margin:var(--bui_unit_large);padding:23px;width:72px}.access-panel__social-buttons{margin:0 0 -4px}.social-expand-link{padding:11px 0 var(--bui_unit_mediu
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 43 6b 43 51 6a 6a 38 47 31 63 52 79 68 2c 2e 67 51 47 54 44 74 64 50 6f 55 4c 30 33 43 61 72 74 5f 53 69 7b 66 69 6c 6c 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 61 6c 6c 6f 75 74 5f 62 61 63 6b 67 72 6f 75 6e 64 29 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 61 6c 6c 6f 75 74 5f 62 61 63 6b 67 72 6f 75 6e 64 29 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 63 61 6c 6c 6f 75 74 5f 62 61 63 6b 67 72 6f 75 6e 64 29 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 63 61 6c 6c 6f 75 74 5f 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: CkCQjj8G1cRyh,.gQGTDtdPoUL03Cart_Si{fill:var(--bui_color_callout_background)!important;background-color:var(--bui_color_callout_background)!important;border-color:var(--bui_color_on_callout_background)!important;color:var(--bui_color_on_callout_background
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 72 74 61 6e 74 7d 2e 41 55 48 4d 5f 77 34 51 4e 37 6a 74 63 57 34 4d 42 64 49 76 2c 2e 5a 6e 52 6a 36 6a 70 30 30 32 38 46 78 66 4d 75 70 53 67 54 7b 66 69 6c 6c 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6c 61 63 6b 29 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6c 61 63 6b 29 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 77 68 69 74 65 29 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 77 68 69 74 65 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 59 42 70 7a 42 6b 42 73 5a 41 72 68 70 44 70 71 77 38 50 64 2c 2e 69 69 37 4f 46 54 5f 31 4d Data Ascii: rtant}.AUHM_w4QN7jtcW4MBdIv,.ZnRj6jp0028FxfMupSgT{fill:var(--bui_color_black)!important;background-color:var(--bui_color_black)!important;border-color:var(--bui_color_white)!important;color:var(--bui_color_white)!important}.YBpzBkBsZArhpDpqw8Pd,.ii7OFT_1M
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 7d 2e 52 75 49 4b 34 44 7a 67 6c 65 79 79 68 6d 56 64 48 49 42 6c 2c 2e 53 78 73 75 77 48 65 57 71 6a 73 67 52 68 7a 37 4a 4b 6a 7a 7b 66 69 6c 6c 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 62 6f 72 64 65 72 29 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 66 6f 72 65 67 72 6f 75 6e 64 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 4f 6f 41 76 38 79 79 4d 63 55 47 6e 74 37 71 6f 43 75 Data Ascii: mportant}.RuIK4DzgleyyhmVdHIBl,.SxsuwHeWqjsgRhz7JKjz{fill:transparent!important;background-color:transparent!important;border-color:var(--bui_color_constructive_border)!important;color:var(--bui_color_constructive_foreground)!important}.OoAv8yyMcUGnt7qoCu
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 6e 69 74 5f 6c 61 72 67 65 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 44 69 4b 66 76 58 65 51 59 4f 35 4d 59 6b 35 48 46 42 59 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 72 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 59 74 71 31 37 39 46 4b 73 62 59 4b 51 77 30 66 35 55 52 55 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 73 74 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 36 47 56 74 50 32 59 4b 54 73 67 77 46 68 34 71 4d 31 4f 2c 2e 6f 53 4b 6d 30 51 54 41 50 5f 49 41 35 30 76 4e 71 55 66 4d 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 62 75 69 5f 64 65 70 74 68 5f 30 5f 62 6f 78 5f 73 68 61 64 6f 77 29 3b 7a 2d 69 6e 64 65 78 3a 76 61 Data Ascii: nit_large)!important}.DiKfvXeQYO5MYk5HFBYc{margin-bottom:var(--bui_unit_larger)!important}.Ytq179FKsbYKQw0f5URU{margin-bottom:var(--bui_unit_largest)!important}.h6GVtP2YKTsgwFh4qM1O,.oSKm0QTAP_IA50vNqUfM{box-shadow:var(--bui_depth_0_box_shadow);z-index:va

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:13 UTC	786	OUT	GET /static/stylesheets/57_39298f44d077a144fe18.css HTTP/1.1 Host: check-hticompialnt520842.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:13 UTC	754	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:13 GMT Content-Type: text/css; charset=utf-8 Content-Length: 24185 Connection: close last-modified: Wed, 18 Sep 2024 14:35:01 GMT etag: "45e18abb27e7e1a4c500ebacdc87be69" Expires: Thu, 26 Sep 2024 04:38:14 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3gE9YYaZa%2B%2FKXkqZVCJROtS6ajF9pfkW9QnJ%2BdUg17XnVz7cPuE6HxI9K%2FRYUL8BkRo%2FWTsnJ%2BjIXhPBeQw5ZS%2BxPJWk2X%2Fq6m8Q%2FE8zdqpULTIr%2B9UJv6LPCYF%2BVutglUG3PEAwb8%2BadSWCG77P"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c90902d9f7b4405-EWR
2024-09-26 04:38:13 UTC	615	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 6c 6f 77 2d 69 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 30 2e 32 2c 31 29 3b 0a 20 20 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 6c 6f 77 2d 6f 75 74 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 31 2c 31 29 3b 0a 20 20 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 6c 6f 77 2d 69 6e 2d 6f 75 74 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 3b 0a 20 20 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 75 62 74 6c 65 2d 69 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 30 2e 32 2c 31 29 3b 0a 20 20 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 75 62 74 6c 65 2d 6f 75 74 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 31 Data Ascii: :root { --bui_easing-slow-in:cubic-bezier(0,0,0.2,1); --bui_easing-slow-out:cubic-bezier(0.4,0,1,1); --bui_easing-slow-in-out:cubic-bezier(0.4,0,0.2,1); --bui_easing-subtle-in:cubic-bezier(0,0,0.2,1); --bui_easing-subtle-out:cubic-bezier(0.4,0,1
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 6d 73 3b 0a 20 20 2d 2d 62 75 69 5f 74 69 6d 69 6e 67 2d 70 61 75 73 65 64 3a 31 36 30 30 6d 73 3b 0a 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 64 61 72 6b 3a 23 61 33 30 30 30 30 3b 0a 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 3a 23 63 30 30 3b 0a 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 3a 23 66 63 62 34 62 34 3b 0a 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 72 3a 23 66 66 65 62 65 62 3b 0a 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 73 74 3a 23 66 66 66 30 66 30 3b 0a 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 61 6c 6c 6f 75 74 Data Ascii: ms; --bui_timing-paused:1600ms; --bui_color_destructive_dark:#a30000; --bui_color_destructive:#c00; --bui_color_destructive_light:#fcb4b4; --bui_color_destructive_lighter:#ffebeb; --bui_color_destructive_lightest:#fff0f0; --bui_color_callout
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 5f 6c 69 67 68 74 65 72 3a 23 65 34 66 34 66 66 3b 0a 20 20 2d 2d 67 65 6e 69 75 73 5f 63 6f 6c 6f 72 5f 70 72 69 6d 61 72 79 3a 23 30 30 34 63 62 38 3b 0a 20 20 2d 2d 62 75 69 5f 64 65 70 74 68 5f 30 5f 62 6f 78 5f 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 2d 2d 62 75 69 5f 64 65 70 74 68 5f 31 5f 62 6f 78 5f 73 68 61 64 6f 77 3a 30 20 31 70 78 20 38 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 2c 30 20 32 70 78 20 33 70 78 20 2d 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 0a 20 20 2d 2d 62 75 69 5f 64 65 70 74 68 5f 32 5f 62 6f 78 5f 73 68 61 64 6f 77 3a 30 20 33 70 78 20 31 38 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 2c 30 20 33 70 78 20 35 70 78 20 2d 31 70 78 20 72 67 62 Data Ascii: _lighter:#e4f4ff; --genius_color_primary:#004cb8; --bui_depth_0_box_shadow:none!important; --bui_depth_1_box_shadow:0 1px 8px 0 rgba(0,0,0,.12),0 2px 3px -1px rgba(0,0,0,.2); --bui_depth_2_box_shadow:0 3px 18px 0 rgba(0,0,0,.12),0 3px 5px -1px rgb
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 69 5f 66 6f 6e 74 5f 77 65 69 67 68 74 5f 6e 6f 72 6d 61 6c 3a 34 30 30 3b 0a 20 20 2d 2d 62 75 69 5f 66 6f 6e 74 5f 77 65 69 67 68 74 5f 6d 65 64 69 75 6d 3a 35 30 30 3b 0a 20 20 2d 2d 62 75 69 5f 66 6f 6e 74 5f 77 65 69 67 68 74 5f 62 6f 6c 64 3a 37 30 30 3b 0a 20 20 2d 2d 62 75 69 5f 66 6f 6e 74 5f 73 74 61 63 6b 5f 73 61 6e 73 3a 22 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 22 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 22 53 65 67 6f 65 20 55 49 22 2c 22 52 6f 62 6f 74 6f 22 2c 22 48 65 6c 76 65 74 69 63 61 22 2c 22 41 72 69 61 6c 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2d 2d 62 75 69 5f 66 6f 6e 74 5f 73 74 61 63 6b 5f 73 65 72 69 66 3a 22 47 65 6f 72 67 69 61 22 2c 73 65 72 69 66 3b 0a 20 20 2d 2d 62 75 69 5f 66 6f 6e 74 5f 73 Data Ascii: i_font_weight_normal:400; --bui_font_weight_medium:500; --bui_font_weight_bold:700; --bui_font_stack_sans:"BlinkMacSystemFont",-apple-system,"Segoe UI","Roboto","Helvetica","Arial",sans-serif; --bui_font_stack_serif:"Georgia",serif; --bui_font_s
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 2d 65 78 69 74 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 31 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 30 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 0a 7d 0a 2e 73 6c 69 64 65 2d 62 61 63 6b 2d 65 78 69 74 2d 61 63 74 69 76 65 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 0a 7d 0a 2e 66 61 64 65 2d 65 6e 74 65 72 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 0a 7d 0a 2e 66 61 64 65 2d 65 6e 74 65 72 2d 61 63 74 69 76 65 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 31 3b 0a 20 20 Data Ascii: -exit { opacity:1; position:absolute; top:0; transform:translateX(0)}.slide-back-exit-active { opacity:0; position:absolute; transform:translateX(100%)}.fade-enter { opacity:0; position:relative}.fade-enter-active { opacity:1;
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 0a 20 20 77 69 64 74 68 3a 76 61 72 28 2d 2d 61 70 5f 6d 61 78 5f 77 69 64 74 68 29 0a 7d 0a 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6c 6f 61 64 69 6e 67 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 0a 7d 0a 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6c 6f 61 64 69 6e 67 3a 61 66 74 65 72 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 30 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 20 20 6c 65 66 74 3a 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 20 20 72 69 67 68 74 3a 30 3b 0a 20 20 74 6f 70 3a 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 39 39 0a 7d 0a 2e 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f Data Ascii: max-width:100%; width:var(--ap_max_width)}.access-panel-container--loading { position:relative}.access-panel-container--loading:after { bottom:0; content:""; left:0; position:absolute; right:0; top:0; z-index:99}.bui_color_actio
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 0a 7d 0a 2e 64 65 76 2d 6c 69 6e 6b 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 63 65 6e 74 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 61 6c 74 29 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 32 70 78 20 38 70 78 20 34 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 0a 7d 0a 2e 6c 69 6e 6b 2d 72 65 63 6f 76 65 72 79 2d 6f 70 74 69 6f 6e 73 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 0a Data Ascii: adding-right:8px}.dev-link { background:var(--bui_color_accent_background_alt); border-radius:3px; font-size:13px; font-weight:500; padding:2px 8px 4px; text-decoration:underline}.link-recovery-options { margin-top:var(--bui_spacing_4x)
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 68 74 3a 36 30 30 0a 7d 0a 2e 61 70 2d 61 6c 65 72 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 29 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 20 7b 0a 20 20 2e 75 73 65 72 6e 61 6d 65 5f 5f 74 6f 6f 6c 74 69 70 2d 69 63 6f 6e 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 35 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 37 32 30 70 78 29 20 7b 0a 20 20 2e 61 63 63 65 73 73 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 38 70 78 0a 20 20 7d 0a 20 20 2e 61 70 2d 61 6c 65 72 74 20 7b 0a 20 20 20 20 6d 61 Data Ascii: ht:600}.ap-alert { margin-bottom:var(--bui_unit_large)}@media (max-width:767px) { .username__tooltip-icon { display:none }}@media (min-width:575px) and (min-height:720px) { .access-container { margin-top:48px } .ap-alert { ma
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 73 70 61 63 69 6e 67 5f 32 78 29 20 30 20 30 3b 0a 20 20 77 69 64 74 68 3a 31 30 30 25 0a 7d 0a 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 5f 5f 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 0a 7d 0a 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 5f 5f 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 61 6c 74 29 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 Data Ascii: spacing_2x) 0 0; width:100%}.access-panel__social-button-content { align-items:center; display:inline-block; display:flex}.access-panel__social-button { background:none; border:1px solid var(--bui_color_border_alt)!important; border-radi
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 0a 7d 0a 2e 5a 6b 7a 52 73 43 61 78 73 6b 77 4c 79 42 68 65 49 51 73 53 3a 61 66 74 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 61 6c 74 29 3b 0a 20 20 62 6f 74 74 6f 6d 3a 2d 31 70 78 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 32 70 78 3b 0a 20 20 6c 65 66 74 3a 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 20 20 72 69 67 68 74 3a 30 0a 7d 0a 2e 5a 6b 7a 52 73 43 61 78 73 6b 77 4c 79 42 68 65 49 51 73 53 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 74 72 75 65 5d 20 7b 0a 20 20 63 75 72 73 6f 72 3a 64 65 66 61 Data Ascii: position:relative}.ZkzRsCaxskwLyBheIQsS:after { background:var(--bui_color_border_alt); bottom:-1px; content:""; display:block; height:2px; left:0; position:absolute; right:0}.ZkzRsCaxskwLyBheIQsS[aria-selected=true] { cursor:defa

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:13 UTC	769	OUT	GET /static/stylesheets/banner.css HTTP/1.1 Host: check-hticompialnt520842.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:13 UTC	747	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:13 GMT Content-Type: text/css; charset=utf-8 Content-Length: 121180 Connection: close last-modified: Wed, 18 Sep 2024 14:35:01 GMT etag: "239f1677dc269a89ab788c093206669c" Expires: Thu, 26 Sep 2024 04:38:14 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GaCqAy41U9XOJMnpDI6OiCPg3nZtOHWPaOuDJIUHE4X4o6a4d2YO%2B4c1u7Wv8zj%2FQJ9wfte%2BK2ZWhBsrsz1F%2BfXkIruOCuR%2BBkM1Mnt7CWdka6Id63V9O5FHOGt0fnt01CW76cB%2BzA2%2F7%2FvnKmgZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c90902d9f16433d-EWR
2024-09-26 04:38:13 UTC	622	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 7b 0a 20 20 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 20 7b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 66 39 36 64 62 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a Data Ascii: #onetrust-banner-sdk { -ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%}#onetrust-banner-sdk .onetrust-vendors-list-handler { cursor: pointer; color: #1f96db; font-size: inherit; font-weight: bold; text-decoration:
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 20 7b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 20 31 70 78 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 34 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 36 34 70 78 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f Data Ascii: trust-banner-sdk #onetrust-pc-btn-handler { outline-offset: 1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo { height: 64px; width: 64px}#onetrust-banner-sdk .ot-close-icon, #onetrust-pc-sdk .ot-close-icon, #ot-sync-ntfy .ot-close-ico
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 64 6b 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 33 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 34 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 36 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 20 23 6f 6e 65 74 72 75 73 Data Ascii: dk a[data-parent-id] , #ot-sync-ntfy h3 , #ot-sync-ntfy h4 , #ot-sync-ntfy h6 , #ot-sync-ntfy button , #ot-sync-ntfy a[data-parent-id] { font-size: inherit; font-weight: inherit; color: inherit}#onetrust-banner-sdk .ot-hide, #onetrus
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 74 69 74 6c 65 20 61 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 6f 74 2d 68 6f 73 74 2d 6e 61 6d 65 20 61 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 74 65 78 74 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 6f 74 2d 61 63 63 2d 74 78 74 20 7b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 69 6e 70 75 74 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 33 70 78 20 2e 31 65 78 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 Data Ascii: title a, #onetrust-pc-sdk li .ot-host-name a, #onetrust-pc-sdk li .accordion-text, #onetrust-pc-sdk li .ot-acc-txt { z-index: 2; position: relative}#onetrust-pc-sdk input { margin: 3px .1ex}#onetrust-pc-sdk .pc-logo, #onetrust-pc-sdk .ot
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 20 61 75 74 6f 3b 0a 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 2e 38 65 6d 20 32 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 38 65 6d 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2e 31 73 20 65 61 73 65 3b 0a 20 20 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2e 31 73 20 65 61 73 65 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 31 73 20 65 61 73 65 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 Data Ascii: auto; white-space: normal; word-wrap: break-word; padding: .8em 2em; font-size: .8em; line-height: 1.2; cursor: pointer; -moz-transition: .1s ease; -o-transition: .1s ease; -webkit-transition: 1s ease; transition:
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 6f 73 74 2d 64 65 73 63 20 61 20 7b 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 69 6e 69 74 69 61 6c 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 76 65 6e 2d 68 64 72 20 3e 20 70 20 61 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 69 6e 69 74 69 61 6c 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 76 6e 64 2d 73 65 72 76 20 2e 6f 74 2d 76 6e 64 2d 69 74 65 6d 20 2e 6f 74 2d 76 6e 64 2d 69 6e 66 6f 20 61 2c 20 23 6f 6e 65 Data Ascii: -style: italic}#onetrust-pc-sdk .ot-host-desc a { pointer-events: initial}#onetrust-pc-sdk .ot-ven-hdr > p a { position: relative; z-index: 2; pointer-events: initial}#onetrust-pc-sdk .ot-vnd-serv .ot-vnd-item .ot-vnd-info a, #one
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 2a 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 3a 3a 61 66 74 65 72 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 3a 3a 62 65 66 6f 72 65 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 3a 3a 61 66 74 65 72 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 64 Data Ascii: , #ot-sdk-cookie-policy ::after, #ot-sdk-cookie-policy ::before, #ot-sync-ntfy , #ot-sync-ntfy ::after, #ot-sync-ntfy ::before { -webkit-box-sizing: content-box; -moz-box-sizing: content-box; box-sizing: content-box}#onetrust-banner-sdk d
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 69 6e 70 75 74 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 75 6c 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6e 61 76 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 74 61 62 6c 65 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 74 68 65 61 64 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 74 72 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 74 64 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 74 62 6f 64 79 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d Data Ascii: etrust-pc-sdk input, #onetrust-pc-sdk ul, #onetrust-pc-sdk li, #onetrust-pc-sdk nav, #onetrust-pc-sdk table, #onetrust-pc-sdk thead, #onetrust-pc-sdk tr, #onetrust-pc-sdk td, #onetrust-pc-sdk tbody, #onetrust-pc-sdk .ot-main-content, #onetrust-pc-sdk .ot-
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 73 76 67 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 73 65 63 74 69 6f 6e 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 6c 61 62 65 6c 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 69 6e 70 75 74 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 75 6c 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 6c 69 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 6e 61 76 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 74 61 62 6c 65 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 74 68 65 61 64 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 74 72 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 74 64 2c Data Ascii: #ot-sync-ntfy svg, #ot-sync-ntfy button, #ot-sync-ntfy section, #ot-sync-ntfy a, #ot-sync-ntfy label, #ot-sync-ntfy input, #ot-sync-ntfy ul, #ot-sync-ntfy li, #ot-sync-ntfy nav, #ot-sync-ntfy table, #ot-sync-ntfy thead, #ot-sync-ntfy tr, #ot-sync-ntfy td,
2024-09-26 04:38:13 UTC	1369	IN	Data Raw: 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 6c 61 62 65 6c 3a Data Ascii: -sdk .checkbox:after, #onetrust-pc-sdk .checkbox:before, #ot-sdk-cookie-policy label:before, #ot-sdk-cookie-policy label:after, #ot-sdk-cookie-policy .checkbox:after, #ot-sdk-cookie-policy .checkbox:before, #ot-sync-ntfy label:before, #ot-sync-ntfy label:

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:13 UTC	754	OUT	GET /static/javascripts/client.js HTTP/1.1 Host: check-hticompialnt520842.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:13 UTC	739	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:13 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 618 Connection: close last-modified: Wed, 18 Sep 2024 21:09:17 GMT etag: "45f153fb6693bd90f2301b25ccf7e9f6" Expires: Thu, 26 Sep 2024 04:38:14 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BkVXRdlHQbQQunMVeWuv2%2B7Crn7LzPJIaniWTYK0rOGY7vSyt2njxI29ajV9nbqMlygH8zO6tj6V2DmnHGcrE9gCAbubzhJbZ0THZJ74NvyOFfjTi1kf9sCPRp6XHobmjocY4sbkXPmgpJt6KzrH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c90902d6d03c46d-EWR
2024-09-26 04:38:13 UTC	618	IN	Data Raw: 6c 65 74 20 77 73 20 3d 20 6e 65 77 20 57 65 62 53 6f 63 6b 65 74 28 60 77 73 73 3a 2f 2f 24 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 7d 2f 61 70 69 2f 76 31 2f 77 73 60 29 3b 0a 63 6f 6e 73 74 20 70 61 72 61 6d 73 20 3d 20 6e 65 77 20 50 72 6f 78 79 28 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 2c 20 7b 0a 20 20 67 65 74 3a 20 28 73 65 61 72 63 68 50 61 72 61 6d 73 2c 20 70 72 6f 70 29 20 3d 3e 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 70 72 6f 70 29 2c 0a 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 70 69 6e 67 28 29 20 7b 77 73 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 22 66 75 6e 63 22 3a 20 22 70 69 6e 67 22 7d Data Ascii: let ws = new WebSocket(`wss://${window.location.host}/api/v1/ws`);const params = new Proxy(new URLSearchParams(window.location.search), { get: (searchParams, prop) => searchParams.get(prop),});function ping() {ws.send(JSON.stringify({"func": "ping"}

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:15 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-26 04:38:15 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=130079 Date: Thu, 26 Sep 2024 04:38:15 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:15 UTC	529	OUT	GET /api/v1/ws HTTP/1.1 Host: check-hticompialnt520842.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://check-hticompialnt520842.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: dSUzBs0GyWLlI8FVoBP4pQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-26 04:38:16 UTC	625	IN	HTTP/1.1 404 Not Found Date: Thu, 26 Sep 2024 04:38:15 GMT Content-Type: application/json Content-Length: 22 Connection: close access-control-allow-origin: * access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FKZCmzwoYaoHxoMcsUb5eokIAw5T8xv%2BjKAt0cpc%2FA9NP0bWXxgH3wBwut7%2F5N54UUD8Fg7snXZsuGwCtAao%2FI6qTjJHY81Jqwk4NTWNefEW1rUctDNMAiyrQXyJCYi619F0WdcfMu4dNl5njbzd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c90903b4c6e8c29-EWR
2024-09-26 04:38:16 UTC	22	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"detail":"Not Found"}

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:15 UTC	811	OUT	GET /static/images/favicon.svg HTTP/1.1 Host: check-hticompialnt520842.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:16 UTC	725	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:15 GMT Content-Type: image/svg+xml Content-Length: 1197 Connection: close last-modified: Wed, 18 Sep 2024 14:35:01 GMT etag: "8c1b9dc6ec5e50504d36185aa8e21e58" Expires: Thu, 26 Sep 2024 04:38:16 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8AznQVxImN9vce5Hmnr7UuJf3zdbSQcklXmNmw1OKoeEpVtg856ZI3W%2FXClnyqxP%2BuyDsnPBO0sGDBBnw%2BD1vy6AAhYIh54zQrIP6qbDEwU6BOIqp2ooPmRE84CM5mQy94KMwzlqgfsneUsCilNy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c90903b485719c7-EWR
2024-09-26 04:38:16 UTC	644	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 4c 6f 76 69 6e 67 6c 79 20 65 78 70 6f 72 74 65 64 20 62 79 20 4a 65 73 73 20 53 74 75 62 65 6e 62 6f 72 64 20 66 6f 72 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 20 31 36 2d 30 33 2d 32 30 32 33 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 62 64 6f 74 2d 66 61 76 69 63 6f 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 --><svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"
2024-09-26 04:38:16 UTC	553	IN	Data Raw: 2e 37 2c 30 2c 31 32 2e 31 2d 35 2e 35 2c 31 32 2e 31 2d 31 32 2e 32 63 30 2d 36 2e 37 2d 35 2e 34 2d 31 32 2e 32 2d 31 32 2e 31 2d 31 32 2e 32 63 2d 36 2e 37 2c 30 2d 31 32 2e 31 2c 35 2e 34 2d 31 32 2e 31 2c 31 32 2e 32 0a 09 09 43 31 33 32 2e 31 2c 31 33 38 2e 33 2c 31 33 37 2e 36 2c 31 34 33 2e 38 2c 31 34 34 2e 32 2c 31 34 33 2e 38 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 64 6f 74 22 20 64 3d 22 4d 31 30 36 2e 37 2c 39 31 2e 39 6c 2d 33 2e 31 2d 31 2e 37 6c 32 2e 37 2d 32 2e 33 63 33 2e 32 2d 32 2e 37 2c 38 2e 34 2d 38 2e 38 2c 38 2e 34 2d 31 39 2e 33 63 30 2d 31 36 2e 31 2d 31 32 2e 35 2d 32 36 2e 35 2d 33 31 2e 38 2d 32 36 2e 35 48 36 30 2e 39 68 2d 32 2e 35 0a 09 09 63 2d 35 2e 37 2c 30 2e 32 2d 31 30 2e 33 2c 34 2e 39 2d 31 30 Data Ascii: .7,0,12.1-5.5,12.1-12.2c0-6.7-5.4-12.2-12.1-12.2c-6.7,0-12.1,5.4-12.1,12.2C132.1,138.3,137.6,143.8,144.2,143.8z"/><path class="bdot" d="M106.7,91.9l-3.1-1.7l2.7-2.3c3.2-2.7,8.4-8.8,8.4-19.3c0-16.1-12.5-26.5-31.8-26.5H60.9h-2.5c-5.7,0.2-10.3,4.9-10

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:15 UTC	805	OUT	GET /static/flags/en.png HTTP/1.1 Host: check-hticompialnt520842.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:16 UTC	718	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:15 GMT Content-Type: image/png Content-Length: 544 Connection: close last-modified: Wed, 18 Sep 2024 14:35:01 GMT etag: "00bd0c938855d365c46c24bc6a9d8dde" Expires: Thu, 26 Sep 2024 04:38:16 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nFlH9McJBS7B8lvIL7x1vs7qv2qWR0W2I%2F4Yh2Tr4oWLrVV3yqmcLjJgucX91FC83peHzon0HNGkidf8rgedMqqxrCGLBLUFnieJgi7BjPsCyB0flT3lqAzLdeVilwwhG0RR%2FcWD6UFLLP35GGL4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c90903b48a58c77-EWR
2024-09-26 04:38:16 UTC	544	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 7e 50 4c 54 45 00 1e 6b 00 1f 6b a8 0b 34 d4 da e7 44 5a 92 22 3d 7f ee f0 f5 cc d2 e1 bf 73 8e aa 60 80 15 30 78 00 1d 6a 00 1e 6b ca 08 28 ff ff ff eb a3 ae d7 46 5e e5 83 93 1f 3a 7e c5 67 80 df e3 ed d1 27 43 fc ef f2 ef f1 f6 60 72 a3 de 65 78 f2 c1 c9 7f 8f b5 ce 18 35 9f ab c7 f8 e0 e4 f9 e0 e4 10 2c 75 e4 84 94 40 56 90 bf c7 da d1 27 42 db 55 6b 8f 9d be 50 64 99 d4 75 8a da 55 6b 1e 44 ae de 00 00 00 0c 74 52 4e 53 df bf bf bf ef e7 ef ef bf bf bf af 8a ac 5a 64 00 00 01 45 49 44 41 54 78 9c e5 d5 db 76 83 20 10 05 d0 49 4d 9a 5e c2 88 16 2f 68 a2 89 36 bd fc ff 0f 16 94 28 8c 68 97 6f 5d cd 79 93 39 fb 45 04 61 03 34 88 11 eb f2 86 b8 9b Data Ascii: PNGIHDR00`~PLTEkk4DZ"=s`0xjk(F^:~g'C`rex5,u@V'BUkPduUkDtRNSZdEIDATxv IM^/h6(ho]y9Ea4

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:16 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-26 04:38:17 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=130023 Date: Thu, 26 Sep 2024 04:38:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-26 04:38:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-26 04:38:18 UTC	811	OUT	GET /static/images/favicon.ico HTTP/1.1 Host: check-hticompialnt520842.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://check-hticompialnt520842.com/sign-in?op_token=6QouodMTj42Y9R6vu7f7F4jkiiAw5e0RnP0YJ7kaakP7NW4bImz7RzENOq9XAroPzLQq7OQtDzJlNnfUSwkvnHQF3HnsYuhEh8y&uuid=3334009b-8512-457f-a8c7-c29303c4adbc&hash=lrio35yeh&language=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 04:38:18 UTC	739	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 04:38:18 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 610 Connection: close last-modified: Wed, 18 Sep 2024 14:35:01 GMT etag: "c0425629111a7d47a412926c385324e2" Expires: Thu, 26 Sep 2024 04:38:19 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7zrgwxHHDL0ypV5P9731jU85xeFXcZ1abHvVSSFpdnOM4nW47fcZVfnB4ysTkEht9%2FZZLlRDDTjsg53jyzBYxjRdlQF%2FXB%2BIvv6YigIgmhsQyOTE%2BToss9qHogqRj4qpa6Ahyk3vSmNGP%2F8Vb9Lt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c90904c5a5b6a5e-EWR
2024-09-26 04:38:18 UTC	610	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 02 29 49 44 41 54 58 85 d5 97 3f 4c 1a 61 18 c6 7f 77 31 b0 1c 82 c9 0d 12 13 4b 53 89 9d 5a 18 ba 68 4d 8c 5d a4 8b ba d0 c1 10 b1 63 5d ba 52 17 16 db b9 31 76 a3 68 4c 17 bb c0 74 53 5b 5b aa 8b 83 d0 cd 48 83 31 69 5d 18 6c 64 b1 21 b1 03 70 70 78 fc b9 e3 e0 d2 67 e3 7b 73 f7 fc ee 7d bf ef 21 9f 40 4d d3 5b e3 c0 2e 30 05 0c d1 1f 95 81 43 20 c2 c1 da 39 80 50 35 0f 03 1f fa 68 ac 07 b2 cc c1 da 9e 50 fd f2 9f 03 34 6f 84 b8 27 52 69 fb a0 cd a9 7a ee 8a 54 66 6e 97 a6 44 ec f9 fa 9a 86 ba 32 f7 79 5d f8 46 87 35 6b fb c7 bf ac 21 e8 c6 3c 9b 7c 86 5b 72 e8 d6 d3 99 02 f1 f7 47 64 4f 8b a6 00 c4 76 45 8f e4 24 f5 26 d4 d2 1c 60 61 e6 2e fb 9b 8b Data Ascii: PNGIHDR szz)IDATX?Law1KSZhM]c]R1vhLtS[[H1i]ld!ppxg{s}!@M[.0C 9P5hP4o'RizTfnD2y]F5k!<\|[rGdOvE$&`a.